18 matches found
EUVD-2016-1295
Malware in sbrugna...
EUVD-2016-1293
Malware in sbrugna...
EUVD-2016-1294
Malware in sbrugna...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05359)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05642)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05643)
Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-03647)
Hitek Software Automize is an automation software suite from Hitek Software that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit this vulnerability to disclose sensitive information...
Information disclosure
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x...
Information disclosure
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager...
CVE-2016-10101
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager...
Design/Logic Flaw
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and...
CVE-2016-10102
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and...
CVE-2016-10101
CVE-2016-10101 affects Hitek Software Automize (10.x/11.x) via the passManager.jsd module. The vulnerability stems from information disclosure: attackers with Read access can recover the encrypted password to access the Password Manager. Documentation notes the impact as information disclosure an...
CVE-2016-10102
Vulnerability summary (CVE-2016-10102) Hitek Software’s Automize app contains a weakness in hitek.jar where SSH/SFTP and Encryption profile passwords are encrypted with weak cryptography. An attacker could retrieve the encrypted values from sshProfiles.jsd and encryptionProfiles.jsd and decrypt t...
CVE-2016-10104
Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to an...
CVE-2016-10103
Affected software/product: Hitek Software Automize. Vulnerability: Information disclosure in encryptionProfiles.jsd caused by the Read attribute being set for Users, enabling recovery of encrypted passwords for GPG Encryption profiles. Root cause / affected component: Read permission on User data...
CVE-2016-10104
Affected product/component: Hitek Software Automatize; issue in the sshProfiles.jsd module. Root cause: Read attribute configured for Users enables information disclosure. Impact: attacker could recover encrypted passwords for SSH/SFTP profiles. Versions affected: 10.x up to 10.25 and 11.x up to ...
CVE-2016-10103
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x...