CoreCVE
Back

HIGH

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation

Published Jun 20, 2016

Description

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-310

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner certcc
Published Jun 20, 2016
Updated Aug 5, 2024
Reserved Feb 12, 2016
Link CVE-2016-2364
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-2364
Red Hat
Severity n/a
Public date n/a
Links CVE-2016-2364