CVE-2015-6747

Published: Aug 31, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Basware Banking (Maksuliikenne) 8.90.07.X does not properly prevent access to private keys, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-6746.

Affected (1)

Products: Basware: Banking

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Basware Banking	Up to 8.90.07

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://seclists.org/fulldisclosure/2015/Jul/120

Source: cve@mitre.org

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/Jul/120

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.