CoreCVE
Back

HIGH

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file

Published Aug 3, 2007

Description

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 3, 2007
Updated Dec 4, 2024
Reserved Aug 3, 2007
Link CVE-2007-4150
CISA Vulnrichment
Updated Feb 9, 2024
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2007-4150
Red Hat
Severity n/a
Public date n/a
Links CVE-2007-4150