Beveiligingsadvies

CVE-2024-42012

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-22 00:00:00

Laatst bijgewerkt 2025-02-04 18:44:05

Toegewezen door mitre

CVSS-score 5.7

Status PUBLISHED

Beschrijving

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate that local user.

← Alle CVE's bekijken Bekijk op cve.org ↗