CVE-2015-5997 Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sni...
HighCVSS 7.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it easier for remote attackers to obtain plaintext data by sniffing the network for ciphertext data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| impero education pro | <= 5008 | No fix listed |
References
- VU#549807 third-party-advisory us-government-resource