CVE-2016-10102: hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile...

Security readout for executives and security teams

Automize stored SSH/SFTP and encryption profile passwords using weak encryption. If an attacker can access the relevant profile files, they may be able to recover cleartext credentials and use them elsewhere. The main business risk is credential compromise, especially where Automize jobs connect to production systems. Exposure is likely limited to organizations running the affected Automize versions and storing SSH/SFTP or encryption profile credentials. Risk increases if local files, backups, shared folders, or host access are broadly available. Treat this as a credential exposure issue, not just an application bug. Prioritize systems where Automize connects to production, customer, financial, or administrative infrastructure. Urgency depends on deployment presence and credential sensitivity. Mitigation focus: Identify Automize installations and versions across endpoints and servers.; Check Hitek vendor guidance for fixed versions or supported upgrade paths.; Restrict filesystem access to Automize profile and backup files..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.