Design/Logic Flaw

2020-12-2222:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.

CPENameOperatorVersion
symphony_\\+_historianeq3.0
symphony_\\+_historianeq3.1
symphony_\\+_operationseq1.1
symphony_\\+_operationseq2.0
symphony_\\+_operationseq2.1 sp1
symphony_\\+_operationseq2.1 sp2
symphony_\\+_operationseq3.0
symphony_\\+_operationseq3.1
symphony_\\+_operationseq3.2
symphony_\\+_operationseq3.3

Name	Operator	Version
symphony_\\+_historian	eq	3.0
symphony_\\+_historian	eq	3.1
symphony_\\+_operations	eq	1.1
symphony_\\+_operations	eq	2.0
symphony_\\+_operations	eq	2.1 sp1
symphony_\\+_operations	eq	2.1 sp2
symphony_\\+_operations	eq	3.0
symphony_\\+_operations	eq	3.1
symphony_\\+_operations	eq	3.2
symphony_\\+_operations	eq	3.3