QID 379156

QID 379156: Robware RVTools Encrypted Credentials Disclosure Vulnerability

RVTools is an application developed by Robware.net and is written in .NET 4.6.1. It interacts with vSphere environments to extract information in a CSV or XLSX format. It can be run through an GUI or using an input CSV File in which the information is stored to connect to the vSphere environment.
In RVTools application, the encryption is configured using a static IV and KEY, using reverse engineering techniques it is possible to extract this IV and KEY. These values can be used to decrypt the password used in the configuration files.
Affected Version:
RVTools before Version 4.5.0
Detection Logic(Authenticate):
It will check the registry and detect the vulnerable version.

Successful exploitation of this vulnerability allows an attacker to decrypt the password used in the configuration files.

CVSS V3 rated as High - 7.5 severity.

CVSS V2 rated as Medium - 5 severity.

Solution

Customer are advised to update to RVTools latest versions to remediate this vulnerability.

Vendor References

RVTools - www.robware.net/rvtools/version/

CVEs related to QID 379156

CVE-2020-27688 |

Software Advisories

Advisory ID	Software	Component	Link
RVTools			www.robware.net/rvtools/

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].