Iagona ScrutisWeb up to 2.1.37 hard-coded key

Summaryinfo

A vulnerability categorized as problematic has been discovered in Iagona ScrutisWeb up to 2.1.37. Affected by this vulnerability is an unknown functionality. Such manipulation leads to hard-coded key. This vulnerability is referenced as CVE-2023-35763. The attack can only be performed from a local environment. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Iagona ScrutisWeb up to 2.1.37 and classified as problematic. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a hard-coded key vulnerability. Using CWE to declare the problem leads to CWE-321. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered. Impacted is confidentiality.

The weakness was published 07/18/2023 as icsa-23-199-03. The advisory is available at cisa.gov. This vulnerability is handled as CVE-2023-35763. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1600.001 by the MITRE ATT&CK project.

Upgrading to version 2.1.38 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Iagona

Name

• ScrutisWeb

Version

• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4
• 2.1.5
• 2.1.6
• 2.1.7
• 2.1.8
• 2.1.9
• 2.1.10
• 2.1.11
• 2.1.12
• 2.1.13
• 2.1.14
• 2.1.15
• 2.1.16
• 2.1.17
• 2.1.18
• 2.1.19
• 2.1.20
• 2.1.21
• 2.1.22
• 2.1.23
• 2.1.24
• 2.1.25
• 2.1.26
• 2.1.27
• 2.1.28
• 2.1.29
• 2.1.30
• 2.1.31
• 2.1.32
• 2.1.33
• 2.1.34
• 2.1.35
• 2.1.36
• 2.1.37

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion