PT-2020-15283
CVE-2020-2078
·
تاريخ النشر
2020-07-29
·
تاريخ التحديث
2020-08-03
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SICK Package Analytics software versions up to and including V04.1.1
Description
The issue concerns the storage of passwords in plain text within the configuration of the software. This allows an authorized attacker to access the stored plaintext credentials, potentially gaining access to the ftp service and compromising personal or sensitive information.
Recommendations
For versions up to and including V04.1.1, update to a version that securely stores passwords, ensuring that plaintext credentials are no longer accessible to authorized attackers.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾