CVE-2016-3684 in Download Manager

Tóm tắt

Bởi MITRE

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 29/03/2016
• Tiết lộ: 14/12/2016
• Kiểm duyệt: được chấp nhận
• mục: VDB-94480
• CPE: sẵn sàng
• CWE: CWE-257 (Đã xác nhận)
• CVSS: 4.7 (NVD)
• EPSS: 0.00288
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3684
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3684
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3684/