Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1022
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
12.6%
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.
Affected configurations
Node
keriokerio_mailserverMatch5.0
ORkeriokerio_mailserverMatch5.1
ORkeriokerio_mailserverMatch5.1.1
ORkeriokerio_mailserverMatch5.6.3
ORkeriokerio_mailserverMatch5.6.4
ORkeriokerio_mailserverMatch5.6.5
ORkeriokerio_mailserverMatch5.7.0
ORkeriokerio_mailserverMatch5.7.1
ORkeriokerio_mailserverMatch5.7.2
ORkeriokerio_mailserverMatch5.7.3
ORkeriokerio_mailserverMatch5.7.4
ORkeriokerio_mailserverMatch5.7.5
ORkeriokerio_mailserverMatch5.7.6
ORkeriokerio_mailserverMatch5.7.7
ORkeriokerio_mailserverMatch5.7.8
ORkeriokerio_mailserverMatch5.7.9
ORkeriokerio_mailserverMatch5.7.10
ORkeriokerio_mailserverMatch6.0
ORkeriokerio_mailserverMatch6.0.1
ORkeriokerio_mailserverMatch6.0.2
ORkeriokerio_mailserverMatch6.0.3
ORkeriokerio_mailserverMatch6.0.4
ORkerioserverfirewallMatch1.0
ORkeriowinroute_firewallMatch5.0.1
ORkeriowinroute_firewallMatch5.0.2
ORkeriowinroute_firewallMatch5.0.3
ORkeriowinroute_firewallMatch5.0.4
ORkeriowinroute_firewallMatch5.0.5
ORkeriowinroute_firewallMatch5.0.6
ORkeriowinroute_firewallMatch5.0.7
ORkeriowinroute_firewallMatch5.0.8
ORkeriowinroute_firewallMatch5.0.9
ORkeriowinroute_firewallMatch5.1
ORkeriowinroute_firewallMatch5.1.1
ORkeriowinroute_firewallMatch5.1.2
ORkeriowinroute_firewallMatch5.1.3
ORkeriowinroute_firewallMatch5.1.4
ORkeriowinroute_firewallMatch5.1.5
ORkeriowinroute_firewallMatch5.1.6
ORkeriowinroute_firewallMatch5.1.7
ORkeriowinroute_firewallMatch5.1.8
ORkeriowinroute_firewallMatch5.1.9
ORkeriowinroute_firewallMatch5.1.10
ORkeriowinroute_firewallMatch5.10
ORkeriowinroute_firewallMatch6.0
ORkeriowinroute_firewallMatch6.0.1
ORkeriowinroute_firewallMatch6.0.2
ORkeriowinroute_firewallMatch6.0.3
ORkeriowinroute_firewallMatch6.0.4
ORkeriowinroute_firewallMatch6.0.5
ORkeriowinroute_firewallMatch6.0.6
ORkeriowinroute_firewallMatch6.0.7
ORkeriowinroute_firewallMatch6.0.8
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
12.6%
Related for NVD:CVE-2004-1022