Beveiligingsadvies

CVE-2007-4150

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-08-03 20:00:00
Laatst bijgewerkt 2024-12-04 15:31:04
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.