CVE-2009-4295

2022-10-0316:24:03

mitre

www.cve.org

sun ray server

software 4.0

software 4.1

vulnerability

dsa private key

generation

remote attackers

sensitive information

sniffed network traffic

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%

JSON

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.