CVE-2000-0449
HighExploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
Risk Assessment
Weak encryption may lead to unauthorized access to sensitive data in the database, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to a newer version of Omnis Studio that employs stronger encryption methods.
Other vulnerabilities in Omnis Studio 2.4
See all- CVE-2023-38335Medium
Omnis Studio 10.22.00 has incorrect access control, allowing 'always private' Omnis libraries to be opened. Although this feature is supposed to be an irreversible operation, implementation issues allow bypassing specific checks.
- CVE-2023-38334Medium
Omnis Studio 10.22.00 has incorrect access control, allowing locked classes in Omnis libraries to be unlocked. This violates the expected behavior of an 'irreversible operation', enabling actions such as deleting, viewing, or modifying these classes.
Original NVD description (English source)
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.