Lucene search
Michael DePlante, Anthony Fuller and Todd Manning of Trend Micro Zero Day Initiative/Trend Micro ResearchZDI-19-785HistorySep 05, 2019 - 12:00 a.m.
Red Lion Crimson Hard-coded Cryptographic Key Information Disclosure Vulnerability
2019-09-0500:00:00
Michael DePlante, Anthony Fuller and Todd Manning of Trend Micro Zero Day Initiative/Trend Micro Research
www.zerodayinitiative.com
15
0.004 Low
EPSS
Percentile
72.2%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Red Lion Crimson. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CTextStreamMemory class. The class contains hard-coded secrets in clear text. An attacker can leverage this to decrypt user passwords.
Related
nvd
nvd
CVE-2019-10990
2019-09-23 16:15:14
prion
prion
Hardcoded credentials
2019-09-23 16:15:00
cvelist
cvelist
CVE-2019-10990
2019-09-23 15:46:43
cve
cve
CVE-2019-10990
2019-09-23 16:15:14
ics
ics
Red Lion Controls Crimson
2019-09-16 12:00:00