It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key.
Metrics
Affected Vendors & Products
References
History
Thu, 10 Oct 2024 15:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-321 |
MITRE
Status: PUBLISHED
Assigner: CERT-PL
Published: 2024-01-12T14:24:20.325Z
Updated: 2024-10-10T15:36:02.435Z
Reserved: 2023-11-24T11:53:46.294Z
Link: CVE-2023-49256
Vulnrichment
No data.
NVD
Status : Modified
Published: 2024-01-12T15:15:09.160
Modified: 2024-11-21T08:33:08.020
Link: CVE-2023-49256
Redhat
No data.