The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries.
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Versiondog | Auvesy | * | 8.0.0 (excluding) |