CVE-2011-3685

CVE-2011-3685 describes a weak encryption vulnerability in Tembria Server Monitor prior to version 6.0.5 Build 2252. The software uses a substitution cipher for application credentials, allowing local attackers with read access to specific files (authentication.dat or XML files in the Exports directory) to obtain sensitive information. With a CVSS score of 1.9 (AV:L/AC:M/Au:N/C:P/I:N/A:N), this is a low-severity vulnerability requiring local access and medium attack complexity, resulting in a potential compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.