PT-2013-1287

تاريخ النشر

2013-11-22

·

تاريخ التحديث

2013-11-22

الوصف من

CVSS 2.0
7.2
عالية
المقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linter Bastion (affected versions not specified)
Description The issue concerns the encryption of BLOB data in Linter Bastion, where a static sequence of 255 bytes is used as the encryption key. This key is the same for all databases, allowing an attacker to potentially determine its value and use it to decrypt the data.
Recommendations For all versions, consider implementing a unique encryption key for each database to prevent unauthorized access to encrypted data. As a temporary workaround, restrict access to sensitive BLOB data until a more secure encryption method can be implemented.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾