| Package | Affected versions | Patched versions |
|---|---|---|
| vbase | = 11.7.0.2 |
When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages. An unauthenticated remote attacker with the ability to capture a login session can obtain the login credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free