CVE-2012-4946
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password...
CVE-2012-4946 is a medium vulnerability (CVSS 5.0) in Agilefleet Fleetcommander, published November 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. No source names a fixed version.
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
Exploit likelihood
What each source reports
NVD Score used
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
- Record
CVE-2012-4946- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
- Record
CVE-2012-4946- Updated
- 2026-11-02
EUVDEUVD-2012-4871 No score
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
- Record
EUVD-2012-4871- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56h6-fch2-ghhm No score
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password...
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a key file and the encrypted strings.
- Record
GHSA-56h6-fch2-ghhm- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |