Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-37291

Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue affects Vitals ESP: from 3.0.8 through 6.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Galaxy Software Services Vitals ESP

Default version status: unaffected

  • 3.0.8 to ≤ 6.2.0affected

References