CVE-2019-7666

Prima Systems FlexAir, Versions 2.3.38 and prior

published July 1, 2019

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14560 · 96.6th percentile
Published
2019-07-01T18:27Z
EPSS history
Timeline
  • 01 JUL 18:27Z
    Prima Systems FlexAir, Versions 2.3.38 and prior
    cvelistv5