WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/388282 | Patch Third Party Advisory US Government Resource |
Configurations
Information
Published : 2005-12-04 16:03
Updated : 2008-09-05 13:55
NVD link : CVE-2005-4002
Mitre link : CVE-2005-4002
JSON object : View
CWE
Products Affected
esi_products
- webeoc