PT-2002-2632 · Click2Learn · Click2Learn Ingenium Learning Management System

Published 2002-12-31 · Updated 2024-02-14 · CVE-2002-1910

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Click2Learn Ingenium Learning Management System versions 5.1 through 6.1

Description The issue concerns the use of weak encryption for passwords in the affected software, specifically a reversible algorithm. This weakness allows attackers to obtain passwords.

Recommendations For versions 5.1 through 6.1, consider implementing a stronger encryption method for password storage to prevent attackers from obtaining passwords. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Exploit

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2002-1910

Affected Products

Click2Learn Ingenium Learning Management System

References · 6

• 🔥 https://exploit-db.com/exploits/21942 · Exploit
• 🔥 http://securityfocus.com/bid/5970 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1910 · Security Note
• https://t.me/cvenotify/71369 · Telegram Post
• http://online.securityfocus.com/archive/1/295309 · Note
• http://iss.net/security_center/static/10389.php · Note