1745 matches found
Apple iMessage Open to Man in the Middle, Spoofing Attacks
The Apple iMessage protocol has been shrouded in secrecy for years now, but a pair of security researchers have reverse-engineered the protocol and found that Apple controls the encryption key infrastructure for the system and therefore has the ability to read users’ text messages–or decrypt them...
PicketBox: Insecure storage of masked passwords
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
Code injection
The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive...
CVE-2013-5008: Exposure of Sensitive Information to an Unauthorized Actor
The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive...
PT-2013-5329
Name of the Vulnerable Software and Affected Versions Symantec Management Platform versions 7.0 through 7.1 before 7.1 SP2 Mp1.1v7 rollup Description The issue allows local users to obtain sensitive information or cause a denial of service by exploiting the use of the same registry-entry encrypti...
CVE-2013-3625
An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere...
Hardcoded credentials
An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere...
CVE-2013-3625
CVE-2013-3625 affects Baramundi Management Suite versions 7.5–8.9. The vulnerability arises from a hard-coded encryption key stored in a DLL, enabling attackers who obtain the key from a product installation elsewhere to defeat cryptographic protections. Connected sources confirm the issue within...
CVE-2013-3625: Undefined Security Weakness
An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere...
PT-2013-4526
Name of the Vulnerable Software and Affected Versions Baramundi Management Suite versions 7.5 through 8.9 Description The issue involves an unspecified DLL file in the software that uses a hardcoded encryption key. This makes it easier for attackers to defeat cryptographic protection mechanisms b...
Input validation
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
CVE-2013-1921
CVE-2013-1921 affects PicketBox data vault in Red Hat JBoss Enterprise Application Platform (EAP) 6.1.x prior to 6.1.1. A local attacker can read the Vault data file and obtain the admin encryption key, exposing encrypted credentials. The issue is reported in multiple advisories (e.g., RHSA-2013:...
CVE-2013-1921
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
CVE-2013-1921: Undefined Security Weakness
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
PT-2013-3471
Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform versions prior to 6.1.1 Description The issue allows local users to obtain the admin encryption key by reading the Vault data file. Recommendations For versions prior to 6.1.1, update to version...
PicketBox: Insecure storage of masked passwords
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
PicketBox: Insecure storage of masked passwords
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file...
CVE-2013-2782: Undefined Security Weakness
Schneider Electric Trio J-Series License Free Ethernet Radio with firmware 3.6.0 through 3.6.3 uses the same AES encryption key across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key...
PT-2013-3925
Name of the Vulnerable Software and Affected Versions Schneider Electric Trio J-Series License Free Ethernet Radio versions 3.6.0 through 3.6.3 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of the AES encryption key, which is t...
