CVE-2022-41397

Publication date

2023-04-28 00:00:00

Family

mitre

State

PUBLISHED

Description

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration files and in database tables.