Code injection

2020-08-1119:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords.

CPENameOperatorVersion
pactwarege5.0
pactwarelt5.0.5.31
pactwareeq3.0 sp4
pactwareeq2.4 sp5
pactwareeq3.5
pactwareeq3.6 sp1

Name	Operator	Version
pactware	ge	5.0
pactware	lt	5.0.5.31
pactware	eq	3.0 sp4
pactware	eq	2.4 sp5
pactware	eq	3.5
pactware	eq	3.6 sp1

References

pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf