CVE-2010-2011 | BDVDB-2026-41831 Detail

Description#

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blogs.msdn.com/developingfordynamicsgp/archive/2008/10/02/why-does-microsoft-dynamics-gp-encrypt-passwords.aspx
http://www.christopherkois.com/?p=448
http://slashdot.org/story/10/05/21/1437227

Exploit#

No public exploit known

History#

Version 12010-05-21Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.