CVE-2020-7196

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that…

published October 26, 2020

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url "/bdswebui/assignusers/".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.1th percentile
Published
2020-10-26T15:05Z
EPSS history
Timeline
  • 26 OCT 15:05Z
    The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that…
    cvelistv5