PT-2017-7734 · Hitek · Automize

Publicado 2017-01-23 · Atualizado 2017-03-15 · CVE-2016-10101

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hitek Software's Automize versions 10.x through 11.x

Description Information Disclosure can occur due to users having the Read attribute, which allows an attacker to recover the encrypted password and access the Password Manager.

Recommendations For versions 10.x through 11.x, consider restricting access to the passManager.jsd file to minimize the risk of exploitation. As a temporary workaround, limit the Read attribute for users to prevent unauthorized access to the Password Manager.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

CWE-255

Identificadores relacionados

CVE-2016-10101

Produtos afetados

Automize

Referências · 4

• http://securityfocus.com/bid/96840 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10101 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-10101 · Aviso do Fabricante
• https://rastamouse.me/guff/2016/automize · Nota