CoreCVE
Back

CRITICAL

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration files and in database tables

Published Apr 28, 2023

Description

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration files and in database tables.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 28, 2023
Updated Jan 31, 2025
Reserved Sep 26, 2022
Link CVE-2022-41397
CISA Vulnrichment
Updated Jan 31, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-41397
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-41397