CVE-2023-27169
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in the license class configuration, leading to the generation of hardcoded and predictable symmetric encryption keys for license generation and validation. This allows an attacker to reconstruct the keys and forge licenses.
Risk Assessment
Predictable encryption keys may allow an attacker to generate their own valid licenses or bypass licensing mechanisms, potentially resulting in unauthorized access to product features. This can lead to financial losses and license violations.
Recommendation
Upgrade the software to a version that removes the hardcoded salt and uses secure, random keys. If upgrading is not possible, contact the vendor for mitigation guidance.
Other vulnerabilities in Xpand IT Write-back manager
See all- CVE-2023-27168Critical
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted JSP file. An attacker can upload a malicious file that gets executed on the server.
- CVE-2023-27172Critical
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key via a brute-force attack, enabling token forgery and unauthorized access.
- CVE-2023-27170High
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. This may enable access to files outside the intended directory.
Original NVD description (English source)
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.