CVE-2013-4425 in OsiriX

요약

\~에 의해 MITRE

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 예약하다: 2013. 06. 12.
• 공개: 2013. 11. 17.
• 모더레이션: 수락
• 항목: VDB-65477
• CPE: 준비됨
• CWE: CWE-255 (확인됨)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00350
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Education, Chemical, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4425
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4425
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4425/