CVE-2020-16244CWE-759

GE Digital APM Classic, Versions 4.4 and prior

published September 23, 2020

CVSS
—
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR vulnerability, puts the entire platform at high risk because an authenticated user can retrieve all user account data and then retrieve the actual passwords.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Weakness
CWE-759 · Use of a One-Way Hash without a Salt
Published
2020-09-23T13:03Z
EPSS history
Timeline
  • 23 SEP 13:03Z
    GE Digital APM Classic, Versions 4.4 and prior
    cvelistv5