CVE-2024-13842

MEDIUM Year: 2024
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-321
View all →

Vulnerability Description

A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.

Related Vulnerabilities

CVE-2019-10963

MEDIUM
CVSS:4.3(Medium)

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must hav...

CWE-3212019

CVE-2017-14014

MEDIUM
CVSS:4.6(Medium)

Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/A...

CWE-3212017

CVE-2018-10896

MEDIUM
CVSS:4.6(Medium)

The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances ...

CWE-3212018

CVE-2023-21404

MEDIUM
CVSS:4.1(Medium)

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compr...

CWE-3212023

CVE-2024-33504

MEDIUM
CVSS:4.1(Medium)

A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all version...

CWE-3212024

CVE-2024-52614

MEDIUM
CVSS:4.0(Medium)

Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK" for Android versions prior to 3.8.5. If this vulnerability is exploited, a local attacker may obtain the...

CWE-3212024