CVE-2015-8329 Weak cryptography in n/a

Medium 5.0 Published 24 Nov 2015 Updated 6 Aug 2024

Weak encryption in SAP MII allows attackers to decrypt passwords and conduct downgrade attacks, compromising credential security.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-8329?

CVE-2015-8329 is a medium-severity vulnerability in n/a, published on 24 Nov 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.

Weakness: CWE-310

Which versions are affected by CVE-2015-8329?

It affects 1 product.

Products include Sap Manufacturing Integration and Intelligence.

How do I fix CVE-2015-8329?

No fix has been published for CVE-2015-8329 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-8329 being exploited?

There is no known exploitation of CVE-2015-8329 in the wild and no public exploit code.

Sources

Also known as GHSA-mjfw-3cv2-84gf.