RSS   Vulnerabilities for 'Bilanc'   RSS

2020-12-23
 
CVE-2020-11719

CWE-326
 

 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key.

 
 
CVE-2020-11720

CWE-798
 

 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password 0000. After the installation, users/admins are not prompted to change this password.

 
 
CVE-2020-11718

CWE-319
 

 
An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its software-update packages are downloaded via cleartext HTTP.

 
2020-12-21
 
CVE-2020-8995

CWE-798
 

 
Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

 
 
CVE-2020-11717

CWE-89
 

 
An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities.

 


Copyright 2024, cxsecurity.com

 

Back to Top