CVE-2020-23249

GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...

CVE-2020-23249

GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...

CVE-2020-23249

CVE-2020-23249 affects GigaVUE-OS (GVOS) versions 5.4–5.9, where the Redis database password is stored in plaintext. The root cause is insecure storage of the Redis password, which could allow an attacker to obtain the database password and potentially perform further attacks. The connected docum...

CVE-2020-23250

GigaVUE-OS (GVOS) versions 5.4–5.9 are affected by a vulnerability stemming from the use of a weak hashing algorithm for data stored in the internal database. Root cause: weak hash algorithm. Documented impact is low (CVSS v3.1: 2.3) with local access required and no user interaction. No exploit ...