NVD

Id
19464  
Name
CVE-2016-3685  
Description
SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of a hardcoded key in the program code and a computer BIOS serial number, aka SAP Security Note 2282338.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-12-14  
Modified Date
2016-12-15  
Seq
2016-3685  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107158 19464 CVE-2016-3685 http://packetstormsecurity.com/files/136172/SAP-Download-Manager-2.1.142-Weak-Encryption.html  View
107159 19464 CVE-2016-3685 20160309 [CORE-2016-0004] - SAP Download Manager Password Weak Encryption  View
107160 19464 CVE-2016-3685 http://www.coresecurity.com/advisories/sap-download-manager-password-weak-encryption  View
107161 19464 CVE-2016-3685 20160309 [CORE-2016-0004] - SAP Download Manager Password Weak Encryption  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64527 JVNDB-2016-006302 SAP Download Manager における重要な設定情報を取得される脆弱性 SAP Download Manager は、Windows および Mac システム上の小さな鍵空間から暗号鍵を生成するため、重要な設定情報を取得される脆弱性が存在します。 CVE-2016-3685 90191 CVE-2016-3685 19464 1.9 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006302.html 2016-03-09 2016-12-20 View