Description (CNA)
QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| QualitySoft Corporation / QND Premium | affected 0 through Ver.11.1i |
| QualitySoft Corporation / QND Standard | affected 0 through Ver.11.1i |
| QualitySoft Corporation / QND Advance | affected 0 through Ver.11.0.9i |
CWE
CWE-321
References
ADP enrichment
No English description supplied.
No references supplied.