Jenkins HP Application Automation Tools Plugin Encryption Security Weakness

Bugtraq ID:	64621
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 08 2013 12:00AM
Updated:	Mar 19 2015 08:28AM
Credit:	David Ehringer
Vulnerable:
Not Vulnerable:

Jenkins HP Application Automation Tools Plugin Encryption Security Weakness

HP Application Automation Tools plugin for Jenkins is prone to a security weakness that may allow attackers to defeat encryption mechanisms.

Successfully exploiting this issue may allow attackers to view encrypted data and obtain sensitive information. This may lead to other attacks.

Jenkins HP Application Automation Tools Plugin Encryption Security Weakness

An attacker can use readily available utilities to exploit this issue.

Jenkins HP Application Automation Tools Plugin Encryption Security Weakness

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Jenkins HP Application Automation Tools Plugin Encryption Security Weakness

References:

• IBM Platform Symphony Homepage (IBM)
  
• Security Bulletin: IBM Platform Symphony (CVE-2013-6305) (IBM)