CVE-2022-41397

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key "LandlordPassKey" to encrypt and decrypt secrets stored in configuration files and in database tables...

CVE-2022-41397

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key "LandlordPassKey" to encrypt and decrypt secrets stored in configuration files and in database tables...

CVE-2022-41397

CVE-2022-41397 concerns Sage 300 (through version 2022) where the optional Web Screens and Global Search features use a hard-coded 40-byte Blowfish key, “LandlordPassKey,” to encrypt/decrypt secrets stored in configuration files and in database tables. This key is embedded in the feature’s encryp...