PT-2020-19608 · Pro Face · Gp-Pro Ex

Published 2020-06-16 · Updated 2020-06-24 · CVE-2020-7492

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GP-Pro EX versions V1.00 through V4.09.100

Description A weakness in password requirements exists, potentially allowing the discovery of the password as it is entered by the user due to the lack of masquerading.

Recommendations For GP-Pro EX versions V1.00 through V4.09.100, consider implementing stronger password requirements and masquerading to protect user passwords until a patch is available.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2020-7492

Affected Products

Gp-Pro Ex

References · 3

• https://osv.dev/vulnerability/CVE-2020-7492 · Vendor Advisory
• https://se.com/ww/en/download/document/SEVD-2020-133-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7492 · Security Note