Security Advisory

CVE-2016-10104

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-01-23 06:49:00

Last updated 2024-08-06 03:07:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14.

← Browse all CVEs View on cve.org ↗