Beveiligingsadvies

CVE-2016-2364

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-06-20 01:00:00
Laatst bijgewerkt 2024-08-05 23:24:49
Toegewezen door certcc
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.