CVE-2016-10104
23.01.2017, 07:59
Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hiteksoftware | automize | 10.00 |
| hiteksoftware | automize | 10.01 |
| hiteksoftware | automize | 10.02 |
| hiteksoftware | automize | 10.03 |
| hiteksoftware | automize | 10.04 |
| hiteksoftware | automize | 10.05 |
| hiteksoftware | automize | 10.06 |
| hiteksoftware | automize | 10.07 |
| hiteksoftware | automize | 10.08 |
| hiteksoftware | automize | 10.09 |
| hiteksoftware | automize | 10.11 |
| hiteksoftware | automize | 10.12 |
| hiteksoftware | automize | 10.13 |
| hiteksoftware | automize | 10.14 |
| hiteksoftware | automize | 10.15 |
| hiteksoftware | automize | 10.16 |
| hiteksoftware | automize | 10.17 |
| hiteksoftware | automize | 10.18 |
| hiteksoftware | automize | 10.19 |
| hiteksoftware | automize | 10.20 |
| hiteksoftware | automize | 10.21 |
| hiteksoftware | automize | 10.22 |
| hiteksoftware | automize | 10.23 |
| hiteksoftware | automize | 10.24 |
| hiteksoftware | automize | 10.25 |
| hiteksoftware | automize | 11.00 |
| hiteksoftware | automize | 11.01 |
| hiteksoftware | automize | 11.02 |
| hiteksoftware | automize | 11.03 |
| hiteksoftware | automize | 11.04 |
| hiteksoftware | automize | 11.05 |
| hiteksoftware | automize | 11.06 |
| hiteksoftware | automize | 11.07 |
| hiteksoftware | automize | 11.08 |
| hiteksoftware | automize | 11.09 |
| hiteksoftware | automize | 11.11 |
| hiteksoftware | automize | 11.12 |
| hiteksoftware | automize | 11.13 |
| hiteksoftware | automize | 11.14 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration