CVE-2016-2364 | BDVDB-2026-76595 Detail

Description#

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/754056

Exploit#

No public exploit known

History#

Version 12016-06-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.