Lucene search
PRIOn knowledge basePRION:CVE-2023-25263HistoryMar 27, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-03-2721:15:00
PRIOn knowledge base
www.prio-n.com
9
stimulsoft designer
design flaw
logic flaw
decompilation
static secret
connectionstrings
mrt files
operating systems
nvd
In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used. The secret does not differ between the tested versions and different operating systems.
Related
cvelist
cvelist
CVE-2023-25263
2023-03-27 00:00:00
cve
cve
CVE-2023-25263
2023-03-27 21:15:11
nvd
nvd
CVE-2023-25263
2023-03-27 21:15:11