PT-2019-5401 · Schneider Electric · Easergy Builder

Published 2019-08-21 · Updated 2020-07-27 · CVE-2020-7517

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easergy Builder versions 1.4.7.2 and older

Description The issue is related to the storage of sensitive information in cleartext. This could allow an attacker to obtain user credentials.

Recommendations For Easergy Builder versions 1.4.7.2 and older, update to a version newer than 1.4.7.2 to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2020-02734

CVE-2020-7517

Affected Products

Easergy Builder

References · 5

• https://se.com/ww/en/download/document/SEVD-2020-161-05 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02734 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7517 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7517 · Vendor Advisory
• https://se.com/us/en/download/document/SEVD-2020-161-05 · Note