Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hardcoded encryption key IV in Exago WebReportsApi.dll
Vulnerability Description
Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an attacker to leak session IDs and elevate privileges. This issue affects: Device42 CMDB versions prior to 18.01.00.
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Vulnerability Type
使用硬编码的密码学密钥
Vulnerability Title
Device42 信任管理问题漏洞
Vulnerability Description
Device42是美国Device42公司的提供业内最先进、最完整的混合云发现和依赖关系映射平台。 Device42 CMDB 18.01.00及之前的版本存在安全漏洞，该漏洞源于Exago Web Reports 的 WebReportsApi.dll 中使用硬编码加密密钥漏洞允许攻击者泄露会话 ID 并提升权限。
CVSS Information
N/A
Vulnerability Type
N/A