PT-2015-7329 · Basware · Basware Banking

Samuel Lavitt · Published 2015-08-31 · Updated 2015-08-31 · CVE-2015-6743

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Basware Banking (Maksuliikenne) version 8.90.07.X

Description The issue allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of a hardcoded password for an unspecified account.

Recommendations For Basware Banking (Maksuliikenne) version 8.90.07.X, consider changing the hardcoded password to a unique and secure password to prevent unauthorized access. As a temporary workaround, restrict access to the account that uses the hardcoded password until a more permanent solution is implemented.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-6743

Affected Products

Basware Banking

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6743 · Security Note
• https://viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html · Note
• http://seclists.org/fulldisclosure/2015/Jul/120 · Note