CVE-2015-6746 Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: t...

LowCVSS 2.1 EPSS 0.57%

Published: 2015-08-31 17:08
Updated: 2026-06-17 03:31
Exploit status: No public exploit known

Description

Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.

Affected products

Product	Affected versions	Fixed in
basware banking	<= 8.90.07	No fix listed

References

CVSS v2.0

2.1 Low

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.57% (percentile 47.8)
CWE: CWE-200

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.