← Retour aux CVEs

CVE-2025-57796

MEDIUM

6.8

Description

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained.

Details CVE

Score CVSS v3.16.8

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurNONE

Publie1/28/2026

Derniere modification2/5/2026

Sourcenvd

Observations honeypot0

Produits affectes

explorance:blue

Faiblesses (CWE)

CWE-257

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0005.md(mandiant-cve@google.com)

https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)(mandiant-cve@google.com)

https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57796(mandiant-cve@google.com)

https://www.explorance.com/products/blue(mandiant-cve@google.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.