CVE-2016-5683

CVE-2016-5683 affects ReadyDesk 9.1. The vulnerability arises from storing SQL Server credentials in encrypted form using a hard-coded cryptographic key found in ReadyDesk.dll, allowing local users to decrypt and obtain cleartext credentials by reading SQL_Config.aspx. Connected sources corrobora...

ReadyDesk contains multiple vulnerabilities

Overview ReadyDesk, version 9.1 and possibly others, contains SQL injection, path traversal, hard-coded cryptographic key, and arbitrary file upload vulnerabilities that may be leveraged to expose sensitive data and execute arbitrary code in the context of the vulnerable software. Description...