CVE-2016-3684 in Download Manager

Sumário

de MITRE

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 29/03/2016
• Divulgação: 14/12/2016
• Moderação: aceite
• Entrada: VDB-94480
• CPE: pronto
• CWE: CWE-257 (confirmado)
• CVSS: 4.7 (NVD)
• EPSS: 0.00288
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3684
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3684
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3684/