CVE-2013-3625

Опубликовано: 03 окт. 2013

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.

Ссылки

http://www.kb.cert.org/vuls/id/392654
US Government Resource
http://www.kb.cert.org/vuls/id/392654
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:baramundi:management_suite:7.5:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:7.6:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.0:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.1:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.2:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.3:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.5:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.6:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.7:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.8:*:*:*:*:*:*:*

cpe:2.3:a:baramundi:management_suite:8.9:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00205

Низкий

7.8 High

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-qv67-37p9-m8r3

github

больше 3 лет назад