CVE-2020-10601

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VBASE Web-Remote Module

Description The issue concerns a weak hashing algorithm and insecure permissions, potentially allowing a local attacker to bypass the password-protected mechanism. This could be achieved through brute-force attacks, cracking techniques, or overwriting the password hash.

Recommendations For VISAM VBASE Editor version 11.5.0.2, consider updating the hashing algorithm to a more secure one and review the permissions settings to ensure they are properly configured. For VBASE Web-Remote Module, restrict access to the module until a secure hashing algorithm and proper permissions are implemented. As a temporary workaround, consider disabling password hash storage or limiting access to the password-protected mechanism until the issue is resolved.