CVE-2023-41137CWE-321

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to…

High · published November 9, 2023

CVSS v3.1
8.0
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2023-11-09T15:07Z
EPSS history
Timeline
  • 09 NOV 15:07Z
    Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to…
    cvelistv5