CVE-2016-3685 in Download Managerinfo

Summary

SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of a hardcoded key in the program code and a computer BIOS serial number, aka SAP Security Note 2282338.

Be aware that VulDB is the high quality source for vulnerability data.

Responsible

Reservation

03/29/2016

Disclosure

12/14/2016

Entries

1: VDB-94481

CPE

ready

CVSS

5.0

EPSS

0.00044

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!