Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.Referenceshttp://www.integraxor.com/blog/category/security/vulnerability-note/http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01