What is CVE-2016-10101?

CVE-2016-10101 is a high-severity vulnerability in Hiteksoftware Automize, classified under CWE-255. CVSS score: 8.1/10. Published 2017-01-23.

How severe is CVE-2016-10101?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Hiteksoftware Automize

CVE-2016-10101

Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager.

EPSS: 0.006 (45.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hiteksoftware Automize — versions 10.00, 10.01, 10.02
N/a — versions n/a

Weakness classification (CWE)

CWE-255
CWE-326 — Inadequate Encryption Strength

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-10101?: CVE-2016-10101 is a high-severity vulnerability in Hiteksoftware Automize, classified under CWE-255. CVSS score: 8.1/10. Published 2017-01-23.
How severe is CVE-2016-10101?: High severity. CVSS v3 base score is 8.1 out of 10.