PT-2021-8822 · Versa · Versa Director

Published 2021-05-26 · Updated 2021-06-07 · CVE-2018-16498

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Versa Director (affected versions not specified)

Description The issue concerns unencrypted backup files stored on the Versa deployment, which contain credentials for various application components, including SNMP, SSL, and Trust keystores. These credentials are stored within configuration files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2018-16498

Affected Products

Versa Director

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-16498 · Security Note
• https://hackerone.com/reports/1168195 · Note
• https://t.me/cvenotify/15715 · Telegram Post