PT-2021-9151 · Psyprax+1 · Psyprax+1

Published 2021-02-05 · Updated 2021-07-21 · CVE-2020-10552

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Psyprax versions prior to 3.2.2

Description An issue was discovered in Psyprax where the Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.

Recommendations For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue. As a temporary workaround, consider changing the default password for the sysdba user to prevent unauthorized access to the Firebird database. Restrict access to local database files to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2020-10552

Affected Products

Firebird

Psyprax

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-10552 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10552 · Vendor Advisory
• https://x41-dsec.de/lab/advisories/x41-2020-002-psyprax · Note
• https://t.me/cibsecurity/23177 · Telegram Post
• https://t.me/cvenotify/9614 · Telegram Post