CVE-2020-28390CWE-522

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3)

published January 12, 2021

CVSS
—
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.8th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2021-01-12T20:18Z
EPSS history
Timeline
  • 12 JAN 20:18Z
    A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3)
    cvelistv5