PT-2020-20636 · Pactware · Pactware

Published 2020-08-11 · Updated 2020-08-18 · CVE-2020-9404

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions PACTware versions prior to 4.1 SP6 PACTware versions 5.x prior to 5.0.5.31

Description The issue allows passwords to be stored in an insecure manner. An attacker may modify these passwords without knowing the current passwords.

Recommendations For versions prior to 4.1 SP6, update to version 4.1 SP6 or later. For versions 5.x prior to 5.0.5.31, update to version 5.0.5.31 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-9404

Affected Products

Pactware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-9404 · Security Note
• https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9404 · Vendor Advisory