CVE-2019-13947CWE-317

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

Medium · published December 12, 2019

CVSS v3.1
4.9
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the

Control Center Server (CCS) transfers user passwords in clear to the

client (browser).

An attacker with administrative privileges for the web interface could be

able to read (and not only reset) passwords of other CCS users.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00857 · 58.0th percentile
Weakness
CWE-317 · Cleartext Storage of Sensitive Information in GUI
Published
2019-12-12T19:08Z
EPSS history
Timeline
  • 12 DEC 19:08Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5