Description
WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.
References
- VU#388282 third-party-advisory
Unscored
CVE-2005-4002
EUVD-2005-3997GHSA-5pqr-784w-qv2q
WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC ins…
Published Dec 5, 2005 · Updated Sep 16, 2024 · Assigned by mitre