CVE Vulnerabilities

CVE-2023-30132

Inadequate Encryption Strength

Published: Oct 19, 2023 | Modified: Oct 26, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.

Weakness

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Affected Software

Name Vendor Start Version End Version
Easyinstall Ixpdata 6.6.14907.0 (including) 6.6.14907.0 (including)

Potential Mitigations

References