CVE-2008-3775

Опубликовано: 22 авг. 2008

Источник: nvd

CVSS3: 4.4

CVSS2: 2.1

EPSS Низкий

Описание

Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value.

Ссылки

http://secunia.com/advisories/31559
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4183
Broken Link
http://www.securityfocus.com/archive/1/495612/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30771
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44575
Third Party Advisory
VDB Entry
http://secunia.com/advisories/31559
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4183
Broken Link
http://www.securityfocus.com/archive/1/495612/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30771
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44575
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:newsoftwares:folder_lock:*:*:*:*:*:*:*:*

Версия до 5.9.5 (включая)

EPSS

Процентиль: 9%

0.00034

Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-327

Связанные уязвимости

GHSA-h6w2-v77h-v84w