Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-24680

Опубликовано: 22 дек. 2020
Источник: nvd
CVSS3: 7
CVSS2: 4.6
EPSS Низкий

Описание

In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-255
CWE-522

Связанные уязвимости

github
больше 3 лет назад

In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-255
CWE-522