Hardcoded credentials

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2022-29856: Use of Hard-coded Credentials

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

Automation 360 信任管理问题漏洞

Automation 360 is a cloud-native end-to-end intelligent automation platform. A security vulnerability exists in Automation 360 version 22 that stems from a hard-coded encryption key that can decrypt exported RPA packages...

PT-2022-30257

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A slab-out-of-bounds bug was found in the decrypt internal function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29638

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A slab-out-of-bounds bug was found in the decrypt internal function of the net/tls component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A slab-out-of-bounds bug was found in the decrypt internal function of the net/tls component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30460

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A slab-out-of-bounds bug was found in the decrypt internal function of the net/tls component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29294

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A slab-out-of-bounds bug was found in the decrypt internal function of the net/tls module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

simpleSAMLphp incorrectly handles XML encryption

simplesamlphp before 1.6.3 squeeze and before 1.8.2 sid incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages...

The vulnerability of the tls_decrypt_ticket function in the OpenSSL library exists due to insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the tlsdecryptticket function in the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

IBM Security Guardium 加密问题漏洞

IBM Security Guardium is a suite of platforms from IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building.IBM Security Guardium has a weak encryption algorithm vulnerability that stems from the fact...

CVE-2022-1279 Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2022-1279: Missing Cryptographic Step

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

CVE-2021-32593

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

CVE-2021-32593: Use of a Broken or Risky Cryptographic Algorithm

A use of a broken or risky cryptographic algorithm vulnerability CWE-327 in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages...

PT-2022-38082

Уязвимость функции decrypt internal модуля net/tls/tls sw.c реализации протокола TLS ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании...

IBM UrbanCode Deploy 加密问题漏洞

IBM UrbanCode Deploy UCD is a suite of application automation deployment tools from IBM. The tool is based on an application deployment automation management information model, and through remote agent technology to automate the deployment of complex applications in different environments, etc. I...