2 matches found
CVE-2016-2364
The Chrome HUDweb plugin before 2016-05-05 for Fonality previously trixbox Pro 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...
7.5CVSS5.8AI score0.02283EPSS
SaveExploits0References1
Hardcoded credentials
The Chrome HUDweb plugin before 2016-05-05 for Fonality previously trixbox Pro 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...
5CVSS7.1AI score0.02283EPSS
SaveExploits0References1Affected Software2
20