CVE-2016-2364

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different…

published June 20, 2016

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02283 · 82.9th percentile
Published
2016-06-20T01:00Z
EPSS history
Timeline
  • 20 JUN 01:00Z
    The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different…
    cvelistv5