Description (CNA)
Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BMC / Control-M/Agent | unaffected 9.0.21; affected 9.0.20; affected 9.0.19; affected 9.0.18 |
CWE
CWE-321, CWE-327
References
- https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099
- https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441966
ADP enrichment
No English description supplied.
No references supplied.