CVE-2020-5805

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml

published January 8, 2021

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Published
2021-01-08T15:13Z
EPSS history
Timeline
  • 08 JAN 15:13Z
    In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml
    cvelistv5