Vulnerability Description
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager.
CVSS Score
8.1
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hiteksoftware | Automize | 10.00 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/96840
- https://rastamouse.me/guff/2016/automize/Third Party Advisory
- http://www.securityfocus.com/bid/96840
- https://rastamouse.me/guff/2016/automize/Third Party Advisory
FAQ
What is CVE-2016-10101?
CVE-2016-10101 is a vulnerability with a CVSS score of 8.1 (HIGH). Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Pas...
How severe is CVE-2016-10101?
CVE-2016-10101 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-10101?
Check the references section above for vendor advisories and patch information. Affected products include: Hiteksoftware Automize.