PT-2020-20224
CVE-2020-8583
·
Published
2020-11-13
·
Updated
2021-05-10
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Element Software versions prior to 12.2
HCI versions prior to 1.8P1
Description
The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session.
Recommendations
For Element Software versions prior to 12.2, update to version 12.2 or later.
For HCI versions prior to 1.8P1, update to version 1.8P1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾