Lucene search

K
jvnJapan Vulnerability NotesJVN:22830348
HistoryJan 31, 2023 - 12:00 a.m.

JVN#22830348: Vulnerability in Driver Distributor where passwords are stored in a recoverable format

2023-01-3100:00:00
Japan Vulnerability Notes
jvn.jp
16
vulnerability
driver distributor
fujifilm business innovation corp
passwords
cwe-257
update
software
configuration file
credentials
vulnerable version

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.1%

Driver Distributor provided by FUJIFILM Business Innovation Corp. contains a vulnerability where passwords are stored in a recoverable format (CWE-257).

Impact

If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator’s credentials may be decrypted.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

  • Driver Distributor v2.2.3.1 and earlier

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.1%

Related for JVN:22830348