CVE-2024-34113

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261)

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261)

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-34113

Adobe ColdFusion is affected by CVE-2024-34113 (Weak Cryptography for Passwords) affecting ColdFusion 2023u7, 2021u13 and earlier. The issue stems from insufficiently strong cryptographic algorithms or flawed implementation used for password protection, enabling potential decryption or guessing o...

Adobe ColdFusion < 2021.x < 2021u14 / 2023.x < 2023u8 Multiple Vulnerabilities (APSB24-41)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 14 or 2023.x update 8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-41 advisory. - Improper Access Control CWE-284 potentially leading to Arbitrary file system read...

CVE-2024-34113: Weak Encoding for Password

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the...

CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

CVE-2024-36823

The encrypt function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information...

PT-2024-27171 · Unknown · Ninja Core

Name of the Vulnerable Software and Affected Versions: Ninja Core version 7.0.0 Description: The encrypt function was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information. Recommendations: For Ninja Core version 7.0.0, consider disabling the...

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

CVE-2024-4563

The CVE-2024-4563 entry concerns Progress MOVEit Automation: the configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length. Reported impact in the sources aligns with potential Confidentiality impact (C:H) per CVSS, with the attack vector/network and...

CVE-2024-34538

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography...

CVE-2024-34538

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography...

PT-2024-25957 · Mateso · Mateso Passwordsafe

Name of the Vulnerable Software and Affected Versions: Mateso PasswordSafe versions 8.13.9.26689 and earlier Description: The issue is related to weak cryptography. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

CVE-2024-34538

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography...

CVE-2024-34538

Mateso PasswordSafe versions 8.13.9.26689 and earlier are impacted by a Weak Cryptography vulnerability. The root cause stems from the use of a cryptographically weak pseudo-random number generator (PRNG) within the application. This flaw could potentially allow for the compromise of sensitive da...

CVE-2024-34538: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Mateso PasswordSafe through 8.13.9.26689 has Weak Cryptography...

CVE-2023-40696

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 264939...

CVE-2020-4874

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190837...