PT-2017-7734

CVE-2016-10101

·

Published

2017-01-23

·

Updated

2017-03-15

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hitek Software's Automize versions 10.x through 11.x
Description Information Disclosure can occur due to users having the Read attribute, which allows an attacker to recover the encrypted password and access the Password Manager.
Recommendations For versions 10.x through 11.x, consider restricting access to the passManager.jsd file to minimize the risk of exploitation. As a temporary workaround, limit the Read attribute for users to prevent unauthorized access to the Password Manager.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾