CVE-2016-3684 in Download Manager

Resumen

por MITRE

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2016-03-29
• Divulgación: 2016-12-14
• Moderación: aceptado
• Artículo: VDB-94480
• CPE: listo
• CWE: CWE-257 (confirmado)
• CVSS: 4.7 (NVD)
• EPSS: 0.00288
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3684
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3684
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3684/