PT-2019-17832 · Portier · Portier Vision

Published 2019-03-19 · Updated 2021-07-21 · CVE-2019-5723

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions portier vision versions 4.4.4.2 through 4.4.4.6

Description The issue concerns the storage of passwords using reversible encryption with an outdated Vigenere algorithm. The encryption key is static and too short, making it easy to decrypt the stored passwords.

Recommendations For versions 4.4.4.2 through 4.4.4.6, consider updating the password storage mechanism to use a secure hashing algorithm instead of reversible encryption. As a temporary workaround, restrict access to the password storage module to minimize the risk of exploitation.

Exploit

Fix

Insufficiently Protected Credentials

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-522

CWE-327

Related Identifiers

CVE-2019-5723

Affected Products

Portier Vision

References · 5

• 🔥 http://packetstormsecurity.com/files/151118/PORTIER-4.4.4.2-4.4.4.6-Cryptographic-Issues.html · Exploit
• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-011.txt · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Jan/8 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5723 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5723 · Security Note