PT-2008-5134 · Newsoft · Folder Lock

Charalambous Glafkos + 1 · Publicado 2008-08-22 · Atualizado 2025-01-17 · CVE-2008-3775

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Folder Lock versions 5.9.5 and earlier

Description The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypting the QualityControl pack registry value.

Recommendations For Folder Lock versions 5.9.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2008-3775

Produtos afetados

Folder Lock

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/44575 · Nota
• http://securityfocus.com/bid/30771 · Nota
• http://securityreason.com/securityalert/4183 · Nota
• http://securityfocus.com/archive/1/495612/100/0/threaded · Nota
• https://t.me/cvenotify/107779 · Publicação no Telegram
• http://secunia.com/advisories/31559 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3775 · Nota de Segurança