Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-08-31T14:08:00
Updated: 2015-08-31T12:57:04
Reserved: 2015-08-28T00:00:00
Link: CVE-2015-6746
JSON object: View
NVD Information
Status : Analyzed
Published: 2015-08-31T14:59:06.150
Modified: 2015-08-31T19:08:26.937
Link: CVE-2015-6746
JSON object: View
Redhat Information
No data.
CWE