CVE-2013-0148

2022-10-0316:15:04

certcc

www.cve.org

data camouflage

faircom c-treeace

unauthorized access

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.2%

JSON

The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration.

References

www.kb.cert.org/vuls/id/900031