The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/900031 | US Government Resource |
Configurations
Information
Published : 2013-06-16 10:55
Updated : 2017-01-19 18:59
NVD link : CVE-2013-0148
Mitre link : CVE-2013-0148
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
faircom
- c-treeace