CVE-2023-27169

MEDIUM

Xpand IT Write-back manager <2.3.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.

References (4)

Core 4

Scores

CVSS v3 6.5
EPSS 0.0026
EPSS Percentile 17.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-798
Status published
Products (1)
xpand-it/write-back_manager 2.3.1
Published Sep 12, 2023
Tracked Since Feb 18, 2026