CVE-2013-6305 Hardcoded credentials in n/a
Attackers can decrypt sensitive data using a shared encryption key across installations, exposing confidential information in IBM Platform Symphony.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6305?
CVE-2013-6305 is a medium-severity vulnerability in n/a, published on 21 Jan 2014.
Official description
IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.
Weakness: CWE-310
Which versions are affected by CVE-2013-6305?
It affects 1 product.
Products include Ibm Platform Symphony.
How do I fix CVE-2013-6305?
No fix has been published for CVE-2013-6305 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6305 being exploited?
There is no known exploitation of CVE-2013-6305 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-r2wp-2rgq-h6m4.