PT-2022-8944 · Fiserv · Fiserv Prologue

Published 2022-08-23 · Updated 2022-08-25 · CVE-2020-35992

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fiserv Prologue through 2020-12-16

Description The issue arises from improper protection of the database password. An attacker gaining access to the configuration file, specifically the LogPassword attribute within appconfig.ini, can decrypt the stored password. This yields cleartext credentials for the database, allowing access to customer financial records and potentially enabling remote database login.

Recommendations For Fiserv Prologue through 2020-12-16, consider restricting access to the configuration file, specifically the appconfig.ini, to prevent unauthorized access to the LogPassword attribute until a proper fix is applied. Additionally, limit remote login capabilities to the database to minimize potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-35992

Affected Products

Fiserv Prologue

References · 5

• https://osv.dev/vulnerability/CVE-2020-35992 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35992 · Security Note
• https://fiserv.com · Vendor Advisory
• https://github.com/micahvandeusen/PrologueDecrypt · Note
• https://t.me/cibsecurity/48569 · Telegram Post