AxxonSoft Axxon One Object Archive Missing Encryption Vulnerability
Vulnerability
A vulnerability exists in AxxonSoft Axxon One Object Archive component, all versions prior to 2.0.8, on both Windows and Linux. The issue stems from a lack of encryption for sensitive data at rest, allowing local attackers with access to exported storage or stolen physical drives to retrieve archive data in plaintext.
Impact
The absence of encryption for sensitive archive data at rest could lead to unauthorized access and extraction of confidential information.
Remediation
Users are advised to upgrade to Axxon One version 2.0.8 or later. After upgrading, enable encryption in the archive storage settings and periodically rotate encryption keys.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.