CVE-2023-27169 | BDVDB-2026-211706 Detail

Description#

Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://writeback4t.com
https://www.xpand-it.com
https://balwurk.com
https://balwurk.com/cve-use-of-hard-coded-cryptographic-key/
https://ghostline.neocities.org/CVE-2023-27169/

Exploit#

No public exploit known

History#

Version 12023-09-12Record published in the CVE List.
Version 22026-09-16Most recent update recorded in the CVE List.