CVE-2020-7000CWE-922

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and…

published April 3, 2020

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01116 · 65.8th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2020-04-03T17:50Z
EPSS history
Timeline
  • 03 APR 17:50Z
    VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and…
    cvelistv5