Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-41397 EUVD-2022-44592GHSA-r76m-38wv-wmv4

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassK…

Published Apr 28, 2023 · Updated Jan 31, 2025 · Assigned by mitre

Description

The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKey") to encrypt and decrypt secrets stored in configuration files and in database tables.

References