Lucene search

Express Accounts Security Vulnerabilities

cve

CVE-2020-13473

NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.

5.5CVSS

5.5AI Score

0.0004EPSS

2020-12-28 10:15 PM

cve

CVE-2020-13474

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.

6.5CVSS

6.3AI Score

0.001EPSS

2020-12-28 10:15 PM