CVE-2013-0148

The Data Camouflage (aka FairCom Standard Encryption) algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certain default configuration.

Score

CVSS 2.0 7.1 High

Status

Modified - cret@cert.org

Published

2013-06-16

Last modified

2024-09-16

Weaknesses

CWE-310

Affected products

• C-treeace (Faircom)

References

• http://www.kb.cert.org/vuls/id/900031