CVE-2023-27169

Name of the Vulnerable Software and Affected Versions Xpand IT Write-back manager version 2.3.1

Description The issue arises from the use of a hardcoded salt in the license class configuration, leading to the generation of hardcoded and predictable symmetric encryption keys for license generation and validation.

Recommendations For Xpand IT Write-back manager version 2.3.1, consider updating to a newer version that addresses the hardcoded salt issue in the license class configuration to prevent the generation of predictable symmetric encryption keys. At the moment, there is no information about a newer version that contains a fix for this vulnerability.