VULNERABILITY INTELLIGENCE

CVE-2007-4150

CVSS score7.5 HIGH
EPSS probability1.05%
CISA KEVNot currently listed
Published2007-08-03
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.

Weakness classification

  • CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Primary references