Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 26 Nov 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 01 Oct 2024 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K encryption key. The threat is from a man-in-the-middle attacker who can intercept and potentially modify data during transmission. | Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key. An attacker with physical access to the application's source code or binary can extract this key & use it decrypt the TLS secret. |
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-11-26T14:50:31.841Z
Reserved: 2023-10-30T00:00:00.000Z
Link: CVE-2023-46919
Vulnrichment
Updated: 2024-08-02T21:01:21.128Z
NVD
Status : Modified
Published: 2023-12-27T21:15:08.103
Modified: 2024-11-21T08:29:29.447
Link: CVE-2023-46919
Redhat
No data.
OpenCVE Enrichment
No data.