VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 20, 2016· Updated May 6, 2026

CVE-2016-2364

CVE-2016-2364

Description

The Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14.1i uses the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected products

4
  • Fonality/Fonality3 versions
    cpe:2.3:a:fonality:fonality:12.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fonality:fonality:12.6:*:*:*:*:*:*:*
    • cpe:2.3:a:fonality:fonality:12.8:*:*:*:*:*:*:*
    • cpe:2.3:a:fonality:fonality:14.1i:*:*:*:*:*:*:*
  • Fonality/Hud Web
    cpe:2.3:a:fonality:hud_web:*:*:*:*:*:fonality:*:*
    Range: <=1.4.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.