Vulnerabilities > CVE-2013-3625 - Credentials Management vulnerability in Baramundi Management Suite

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
baramundi
CWE-255
NVD
Published: 2013-10-03
Updated: 2013-10-03

Summary

An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.

Vulnerable Configurations

Part Description Count
Application
Baramundi
11

Common Weakness Enumeration (CWE)

References