← Back

CVE-2016-10104

nvd nist
Published: Jan 23, 2017Modified: May 13, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14.

Affected (39)

Hiteksoftware
1 product
Automize
Configuration A
39 vulnerable
Vulnerable SoftwareAffected Versions
Hiteksoftware
Automize
Version 10.00
Automize
Version 10.01
Automize
Version 10.02
Automize
Version 10.03
Automize
Version 10.04
Automize
Version 10.05
Automize
Version 10.06
Automize
Version 10.07
Automize
Version 10.08
Automize
Version 10.09
Automize
Version 10.11
Automize
Version 10.12
Automize
Version 10.13
Automize
Version 10.14
Automize
Version 10.15
Automize
Version 10.16
Automize
Version 10.17
Automize
Version 10.18
Automize
Version 10.19
Automize
Version 10.20
Automize
Version 10.21
Automize
Version 10.22
Automize
Version 10.23
Automize
Version 10.24
Automize
Version 10.25
Automize
Version 11.00
Automize
Version 11.01
Automize
Version 11.02
Automize
Version 11.03
Automize
Version 11.04
Automize
Version 11.05
Automize
Version 11.06
Automize
Version 11.07
Automize
Version 11.08
Automize
Version 11.09
Automize
Version 11.11
Automize
Version 11.12
Automize
Version 11.13
Automize
Version 11.14

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.