Описание
Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.
Уязвимые конфигурации
Конфигурация 1Версия до 9.0.20.200 (включая)
cpe:2.3:a:bmc:control-m\/agent:*:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.00021
Низкий
7.4 High
CVSS3
Дефекты
CWE-321
Связанные уязвимости
CVSS3: 7.4
github
5 месяцев назад
Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.
EPSS
Процентиль: 5%
0.00021
Низкий
7.4 High
CVSS3
Дефекты
CWE-321