PT-2000-1390 · Omnis · Omnis Studio

Publicado 2000-05-01 · Atualizado 2008-09-10 · CVE-2000-0449

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Omnis Studio version 2.4

Description The issue concerns the use of weak encryption, specifically trivial encoding, for encrypting database fields.

Recommendations For Omnis Studio version 2.4, consider using an alternative, more secure encryption method to protect database fields until a patch or update is available that addresses this issue. As a temporary workaround, restrict access to sensitive data stored in these fields to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-0449

Produtos afetados

Omnis Studio

Referências · 4

• 🔥 https://exploit-db.com/exploits/19967 · Exploit
• http://securityfocus.com/bid/1255 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0449 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0311.html · Nota