CVE-2020-14489CWE-522

OpenClinic GA

Medium · published July 29, 2020

CVSS v3.1
6.2
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00982 · 61.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2020-07-29T12:24Z
EPSS history
Timeline
  • 29 JUL 12:24Z
    OpenClinic GA
    cvelistv5