CVE-2019-19096CWE-257

ABB eSOMS: REDIS clear text credentials

Medium · published April 2, 2020

CVSS v3.1
6.1
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2020-04-02T19:48Z
EPSS history
Timeline
  • 02 APR 19:48Z
    ABB eSOMS: REDIS clear text credentials
    cvelistv5