CVE-2012-4946 Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a....
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| agilefleet fleetcommander | <= 4.0 | No fix listed |
| agilefleet fleetcommander kiosk | <= 4.0 | No fix listed |
References
- VU#427547 third-party-advisory us-government-resource
- 56427 vdb-entry
- fleetcommander-info-disc(79857) vdb-entry