CVE-2020-7196: Exposure of Sensitive Information to an Unauthorized Actor

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...

PT-2020-19456

Name of the Vulnerable Software and Affected Versions HPE BlueData EPIC Software Platform version 4.0 HPE Ezmeral Container Platform version 5.0 Description The issue concerns an insecure method of handling sensitive Kerberos passwords, making them susceptible to unauthorized interception and/or...