Medium severity6.5NVD Advisory· Published Oct 27, 2020· Updated Jun 17, 2026
CVE-2020-27181
CVE-2020-27181
Description
A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset tokens or decrypt server-side configuration files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:konzept-ix:publixone:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:konzept-ix:publixone:*:*:*:*:*:*:*:*range: <2020.015
- (no CPE)range: <2020.015
- konzept-ix/publiXonedescription
Patches
Vulnerability mechanics
References
2- sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-publixone/nvdThird Party Advisory
- seclists.org/fulldisclosure/2020/Oct/28nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.