CVE-2020-27181

A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt…

published October 27, 2020

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt server-side configuration files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00942 · 60.6th percentile
Published
2020-10-27T04:21Z
EPSS history
Timeline
  • 27 OCT 04:21Z
    A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt…
    cvelistv5