Unscored severity · published May 21, 2010
CVE-2010-2011
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain…
–
CVSS
10.7%
EPSS
No
On KEV
Description
Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DG
Dynamics GP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2011
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2011
blogs.msdn.com
http://blogs.msdn.com/developingfordynamicsgp/archive/2008/10/02/why-does-microsoft-dynamics-gp-encrypt-passwords.aspx
slashdot.org
http://slashdot.org/story/10/05/21/1437227
www.christopherkois.com
http://www.christopherkois.com/?p=448
More from Dynamics GP
8.8
CVE-2022-23274
Microsoft Dynamics GP Remote Code Execution Vulnerability
8.1
CVE-2022-23272
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
7.1
CVE-2022-23273
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
6.5
CVE-2022-23271
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
5.4
CVE-2022-23269
Microsoft Dynamics GP Spoofing Vulnerability