medium6.5
CVE-2023-27169
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric …
Impact
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xpand-It | Write-Back Manager | Version 2.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://balwurk.com
- https://balwurk.com/cve-use-of-hard-coded-cryptographic-key/
- https://ghostline.neocities.org/CVE-2023-27169/
- https://writeback4t.com
- https://www.xpand-it.com
- https://balwurk.com
- https://balwurk.com/cve-use-of-hard-coded-cryptographic-key/
- https://writeback4t.com
- https://www.xpand-it.com