{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-31362","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","state":"PUBLISHED","assignerShortName":"jpcert","dateReserved":"2025-04-02T01:34:56.875Z","datePublished":"2025-04-11T09:38:43.242Z","dateUpdated":"2025-04-11T14:36:44.148Z"},"containers":{"cna":{"affected":[{"vendor":"OPEN, Inc.","product":"BizRobo!","versions":[{"version":"all versions","status":"affected"}]}],"descriptions":[{"lang":"en","value":"Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available.\r\nThe vendor provides the workaround information and recommends to apply it to the deployment environment."}],"problemTypes":[{"descriptions":[{"description":"Use of hard-coded cryptographic key","lang":"en-US","cweId":"CWE-321","type":"CWE"}]}],"references":[{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39951710517145"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39952052043289"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/39953373809305"},{"url":"https://knowledge.bizrobo.com/hc/ja/articles/360029772271"},{"url":"https://jvn.jp/en/jp/JVN30641875/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"LOW","baseScore":3.7,"vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}}],"providerMetadata":{"orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert","dateUpdated":"2025-04-11T09:38:43.242Z"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-11T14:36:14.079306Z","id":"CVE-2025-31362","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-11T14:36:44.148Z"}}]}}