CVE-2007-4150

HIGH7.5

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12

Published Aug 3, 2007

Modified 1 years ago

Details

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.

References

WEB

http://osvdb.org/46979

WEB

http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt

WEB

http://www.securityfocus.com/bid/25153

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-4150

CVSS Analysis

CVSS v3.1

7.5