Approved changes feed: RSS · Atom

cpe:2.3:a:hiteksoftware:automize:10.18:*:*:*:*:*:*:*

part: a version: 10.18 update: *

VendorHiteksoftware (eb22e8f4-3191-5bb5-b436-e7456d849c73)
ProductAutomize (a90f969d-f0c5-544f-8abe-0f2b66b79a3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10104 vulnerable 2026-06-08 05:07:17.295982 Details available
Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for SSH/SFTP profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14.
Published: 2017-01-23T06:49:00.000Z
Updated: 2024-08-06T03:07:32.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10103 vulnerable 2026-06-08 05:07:17.294882 Details available
Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute being set for Users. This allows an attacker to recover encrypted passwords for GPG Encryption profiles. Verified in all 10.x versions up to and including 10.25, and all 11.x versions up to and including 11.14.
Published: 2017-01-23T06:49:00.000Z
Updated: 2024-08-06T03:07:32.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10102 vulnerable 2026-06-08 05:07:17.293661 Details available
hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. This allows an attacker to retrieve the encrypted passwords from sshProfiles.jsd and encryptionProfiles.jsd and decrypt them to recover cleartext passwords. All 10.x up to and including 10.25 and all 11.x up to and including 11.14 are verified to be affected.
Published: 2017-01-23T06:49:00.000Z
Updated: 2024-08-06T03:07:32.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10101 vulnerable 2026-06-08 05:07:17.281548 Details available
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attribute, which allows an attacker to recover the encrypted password to access the Password Manager.
Published: 2017-01-23T06:49:00.000Z
Updated: 2024-08-06T03:07:32.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.