PT-2019-17832 · Portier · Portier Vision

Publicado 2019-03-19 · Atualizado 2021-07-21 · CVE-2019-5723

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions portier vision versions 4.4.4.2 through 4.4.4.6

Description The issue concerns the storage of passwords using reversible encryption with an outdated Vigenere algorithm. The encryption key is static and too short, making it easy to decrypt the stored passwords.

Recommendations For versions 4.4.4.2 through 4.4.4.6, consider updating the password storage mechanism to use a secure hashing algorithm instead of reversible encryption. As a temporary workaround, restrict access to the password storage module to minimize the risk of exploitation.

Exploit

Correção

Insufficiently Protected Credentials

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-522

CWE-327

Identificadores relacionados

CVE-2019-5723

Produtos afetados

Portier Vision

Referências · 5

• 🔥 http://packetstormsecurity.com/files/151118/PORTIER-4.4.4.2-4.4.4.6-Cryptographic-Issues.html · Exploit
• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-011.txt · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Jan/8 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5723 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5723 · Nota de Segurança