PT-2002-2632 · Click2Learn · Click2Learn Ingenium Learning Management System

CVE-2002-1910 · Publicado 2002-12-31 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click2Learn Ingenium Learning Management System versions 5.1 through 6.1

Description The issue concerns the use of weak encryption for passwords in the affected software, specifically a reversible algorithm. This weakness allows attackers to obtain passwords.

Recommendations For versions 5.1 through 6.1, consider implementing a stronger encryption method for password storage to prevent attackers from obtaining passwords. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Exploit

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2002-1910

Produtos afetados

Click2Learn Ingenium Learning Management System

Referências · 6

• 🔥 https://exploit-db.com/exploits/21942 · Exploit
• 🔥 http://securityfocus.com/bid/5970 · Exploit
• https://t.me/cvenotify/71369 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2002-1910 · Nota de Segurança
• http://online.securityfocus.com/archive/1/295309 · Nota
• http://iss.net/security_center/static/10389.php · Nota