CVE-2016-10104: Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attrib...

Security readout for executives and security teams

Automize can expose stored SSH/SFTP profile password data because the sshProfiles.jsd file is readable by Users. A person with access to that file could recover encrypted password material tied to automation connections. The source bundle does not provide CVSS, a vendor patch statement, or evidence of active exploitation. Exposure is limited to environments running the listed Automize versions and using SSH/SFTP profiles. Risk is higher where non-administrative or untrusted users can access the host or file path containing sshProfiles.jsd. Treat this as a credential exposure risk, not a broad remote compromise by itself. Prioritize systems where Automize stores production SSH/SFTP credentials or runs on shared hosts. The urgency depends on credential sensitivity and user access to the affected file. Mitigation focus: Inventory Automize deployments and identify versions 10.x through 10.25 or 11.x through 11.14.; Check Hitek Software guidance for supported fixed versions or approved configuration changes.; Review access permissions on sshProfiles.jsd and restrict access where vendor guidance permits..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.