An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Management_suite | Baramundi | 7.5 (including) | 7.5 (including) |
| Management_suite | Baramundi | 7.6 (including) | 7.6 (including) |
| Management_suite | Baramundi | 8.0 (including) | 8.0 (including) |
| Management_suite | Baramundi | 8.1 (including) | 8.1 (including) |
| Management_suite | Baramundi | 8.2 (including) | 8.2 (including) |
| Management_suite | Baramundi | 8.3 (including) | 8.3 (including) |
| Management_suite | Baramundi | 8.5 (including) | 8.5 (including) |
| Management_suite | Baramundi | 8.6 (including) | 8.6 (including) |
| Management_suite | Baramundi | 8.7 (including) | 8.7 (including) |
| Management_suite | Baramundi | 8.8 (including) | 8.8 (including) |
| Management_suite | Baramundi | 8.9 (including) | 8.9 (including) |