CVE-2015-2998

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by…

published June 8, 2015

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26179 · 98.0th percentile
Published
2015-06-08T14:00Z
EPSS history
Timeline
  • 08 JUN 14:00Z
    SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by…
    cvelistv5