GHSA-r646-7c2g-jcg7Medium
Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and...
🔗 CVE IDs covered (1)
📋 Description
Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118464
- https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical
- https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html
- https://github.com/advisories/GHSA-r646-7c2g-jcg7