CVE-2015-6746

Published: Aug 31, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.

Affected (1)

Products: Basware: Banking

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Basware Banking	Up to 8.90.07

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://seclists.org/fulldisclosure/2015/Jul/120

Source: cve@mitre.org

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/Jul/120

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.