CVE-2016-3684 in Download Manager

摘要

由 MITRE

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2016-03-29
• 披露: 2016-12-14
• 管理: 已接受
• 条目: VDB-94480
• CPE: 准备好
• CWE: CWE-257 (已确认)
• CVSS: 4.7 (NVD)
• EPSS: 0.00288
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3684
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3684
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3684/