CVE: CVE-2002-1910

Export to Word

Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.01894
Percentile: 0.82406

CVSS Scoring

CVSS v3.1 Score: 7.5

Severity: HIGH

Mapped CWE(s)

CWE-326 : Inadequate Encryption Strength

All CAPEC(s)

CAPEC-112: Brute Force
CAPEC-192: Protocol Analysis
CAPEC-20: Encryption Brute Forcing

CAPEC(s) with Mapped TTPs

CAPEC-112: Brute Force
Mapped TTPs:
- T1110 : Brute Force

Mapped ATT&CK TTPs

T1110 : Brute Force
Kill Chain: credential-access

Malware

Chaos
Caterpillar WebShell
Pysa
Kinsing
QakBot

APTs Threat Group Associations

Dragonfly
OilRig
Fox Kitten
Turla
Ember Bear
APT28
HEXANE
APT39
APT38
DarkVishnya
APT41
Agrius
FIN5

Campaigns

2016 Ukraine Electric Power Attack
Operation Dream Job

Affected Products

cpe:2.3:a:click-2:ingenium_learning_management_system:5.1:*:*:*:*:*:*:*
cpe:2.3:a:click-2:ingenium_learning_management_system:6.1:*:*:*:*:*:*:*

← Back to Home