{"id":"CVE-2007-4150","aliases":["EUVD-2007-4134","GHSA-p929-hj2v-79xf"],"status":"published","title":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak...","description":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01046,"percentile":0.64381,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2007-08-03T20:00:00Z","modified":"2026-06-16T22:43:29Z","products":[{"vendor":"visionsoft","product":"audit"}],"references":[{"url":"http://www.securityfocus.com/bid/25153","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt","tags":["x_refsource_MISC","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://osvdb.org/46979","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4150"},{"url":"https://github.com/advisories/GHSA-p929-hj2v-79xf"}],"sources":{"cve":[{"id":"CVE-2007-4150","description":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.","status":"published","published":"2007-08-03T20:00:00Z","modified":"2024-12-04T15:31:04.777Z","updated_at":"2026-11-02T13:33:30.262137Z"}],"euvd":[{"id":"EUVD-2007-4134","description":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.","status":"published","published":"2007-08-03T20:00:00Z","modified":"2024-12-04T15:31:04Z","updated_at":"2026-11-03T00:04:41.381577Z"}],"ghsa":[{"id":"GHSA-p929-hj2v-79xf","title":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak...","description":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.","status":"published","published":"2022-05-01T18:20:43Z","modified":"2024-02-09T03:32:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:55:34.624515Z"}],"nvd":[{"id":"CVE-2007-4150","description":"The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.","status":"published","published":"2007-08-03T20:17:00Z","modified":"2026-06-16T22:43:29.71Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}