CVE-2020-37115CWE-256

GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

High · published February 3, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00294 · 20.8th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-02-03T16:52Z
EPSS history
Timeline
  • 03 FEB 16:52Z
    GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage
    cvelistv5