Description (CNA)
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VISAM / VBASE Editor | affected 11.5.0.2 |
| VISAM / VBASE Web-Remote Module | affected all |
CWE
CWE-922
References
ADP enrichment
No English description supplied.