Weak Password Encryption in OpenText Exceed OnDemand by OpenText
CVE-2013-6805

Currently unrated

Key Information:

Vendor
Opentext
Status
Exceed Ondemand
Vendor
CVE Published:
19 May 2014

Summary

OpenText Exceed OnDemand (EoD) 8 utilizes weak encryption methods for user passwords, considerably increasing the risk of credential exposure. This vulnerability enables remote attackers to intercept and decipher sensitive credentials through network sniffing techniques. Moreover, local users can easily access these credentials by inspecting the .eod8 files, making the system susceptible to unauthorized access. It is crucial for users to be aware of this security flaw and consider appropriate mitigations.

References

https://github.com/koto/exceed-mitm
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.