CVE

Id
87603  
CVE No.
CVE-2016-10102  
Status
Candidate  
Description
hitek.jar in Hitek Software"s Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and including 10.25 and all 11.x up to and including 11.14 are verified to be affected.  
Phase
Assigned (20170102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764306 87603 CVE-2016-10102 MISC:https://rastamouse.me/guff/2016/automize/  View
764307 87603 CVE-2016-10102 BID:96848  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1803 JVNDB-2016-002576 Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 Microsoft Internet Explorer 10、11、および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR には、不特定の影響を受ける脆弱性が存在します。 CVE-2016-1097 87603 7.6 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002576.html  View