CVE-2016-10103: Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read...

Security readout for executives and security teams

Automize stored GPG encryption profile password data in a file whose permissions allowed the Users group to read it. A person with access to the affected system could recover those stored profile passwords. The source bundle does not show remote exploitation, active exploitation, CVSS scoring, or a vendor-fixed version. Exposure is most likely on systems running Hitek Software Automize 10.x through 10.25 or 11.x through 11.14 with GPG Encryption profiles configured. Treat this as a credential exposure risk for any affected Automize host. Prioritize systems handling sensitive file transfers or encryption workflows, especially shared Windows servers where many users may have local access. Mitigation focus: Check Hitek Software guidance for supported fixed versions or vendor-recommended remediation.; Restrict read access to encryptionProfiles.jsd to only required administrative or service accounts.; Rotate exposed GPG Encryption profile passwords if vulnerable file access was possible..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.