PT-2020-20635 · Pactware · Pactware

Published 2020-08-11 · Updated 2020-08-19 · CVE-2020-9403

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PACTware versions prior to 4.1 SP6 PACTware versions 5.x prior to 5.0.5.31

Description The issue allows passwords to be stored in a recoverable format. As a result, any user with access to the PACTware workstation may retrieve these passwords.

Recommendations For versions prior to 4.1 SP6, update to version 4.1 SP6 or later. For versions 5.x prior to 5.0.5.31, update to version 5.0.5.31 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-9403

Affected Products

Pactware

References · 3

• https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9403 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9403 · Vendor Advisory