PT-2020-12691

CVE-2020-11557

·

Published

2020-04-09

·

Updated

2021-07-21

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Castle Rock SNMPc Online versions 12.10.10 and earlier
Description An issue was discovered in Castle Rock SNMPc Online where it includes the username and password values in cleartext within each request's cookie value.
Recommendations For Castle Rock SNMPc Online versions 12.10.10 and earlier, update to a version released after 2020-01-28 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-319: Cleartext Transmission of Sensitive Information
CWE-522: Insufficiently Protected Credentials
Related identifiers
CVE-2020-11557
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com