VULNERABILITY INTELLIGENCE
CVE-2015-6746
CVSS score2.1 LOW
EPSS probability0.57%
CISA KEVNot currently listed
Published2015-08-31
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor