Insecure Encryption Implementation in CryptoBuddy 1.0 and 1.2

Insecure Encryption Implementation in CryptoBuddy 1.0 and 1.2

CVE-2003-1392 · MEDIUM Severity

AV:L/AC:L/AU:N/C:C/I:C/A:N

CryptoBuddy 1.0 and 1.2 does not use the user-supplied passphrase to encrypt data, which could allow local users to use their own passphrase to decrypt the data.

Learn more about our User Device Pen Test.