Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating system.
References
Link | Resource |
---|---|
https://www.contextis.com/en/resources/advisories/cve-2020-16280 | Third Party Advisory |
Configurations
Information
Published : 2020-08-20 09:15
Updated : 2020-08-26 06:43
NVD link : CVE-2020-16280
Mitre link : CVE-2020-16280
JSON object : View
CWE
CWE-522
Insufficiently Protected Credentials
Products Affected
rangee
- rangeeos