CVE-2002-1946
Severity:
MEDIUM
Type:
CWE-326
Inadequate Encryption Strength
Publication date:
31/12/2002
Last modified:
14/02/2024
Description
Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry key, which allows local users to obtain and decrypt the password.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:tata:integrated_dialer:1.2.000:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page