BoKS Manager boks-server vulnerabilities
1 known vulnerability in BoKS Manager boks-server from Fortra. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
BoKS Manager boks-server: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal an