Skip to content
OpenAdvisories

Product · ConnectWise

Risk Assessment

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.0

    Hardcoded Key Revealed in ConnectWise Password Encryption Utility

    ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without d…