CVE-2021-32942CWE-316

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user…

Medium · published June 9, 2021

CVSS v3.1
6.6
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2021-06-09T16:06Z
EPSS history
Timeline
  • 09 JUN 16:06Z
    The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user…
    cvelistv5