Lucene search
HistoryNov 18, 2013 - 2:55 a.m.
CVE-2013-4425
nvd
osirix
cve-2013-4425
dicom
tls
private key
encryption
supersecretpassword
local users
6.4 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using “SuperSecretPassword” as the hardcoded password, which allows local users to obtain the private key.
Related
securityvulns
securityvulns
Osirix information leakage
2013-12-09 00:00:00
cvelist
cvelist
CVE-2013-4425
2013-11-15 18:16:00
prion
prion
Hardcoded credentials
2013-11-18 02:55:00
6.4 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2013-4425