CVE-2015-6846
EMC SourceOne Email Supervisor < 7.1 - Hardcoded Encryption Key Exposure
Title source: llmDescription
EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining how a program's code conducts cryptographic operations.
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2015/Oct/58
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033787
Scores
EPSS
0.0018
EPSS Percentile
39.1%
Details
CWE
CWE-255
Status
published
Products (1)
emc/sourceone_email_supervisor
< 7.1
Published
Oct 18, 2015
Tracked Since
Feb 18, 2026