CVE-2022-34906

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2

published July 25, 2022

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10903 · 95.9th percentile
Published
2022-07-25T20:26Z
EPSS history
Timeline
  • 25 JUL 20:26Z
    A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2
    cvelistv5