Описание
There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.
Ссылки
- Release Notes
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 13.0.1440.24261 (включая)
cpe:2.3:a:docusnap:docusnap:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00044
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-1394
Связанные уязвимости
CVSS3: 4.3
github
11 месяцев назад
There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.
EPSS
Процентиль: 13%
0.00044
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-1394