PT-2026-5860 · Openclass+1 · Gunet Open Eclass+1

Emaragkos · Published 2026-02-03 · Updated 2026-02-03 · CVE-2020-37115

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GUnet OpenEclass version 1.7.3

Description User credentials are stored in plaintext, which allows administrators to view usernames and passwords of all registered users without encryption. This exposure of sensitive information increases the risk of credential theft and unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2020-37115

Affected Products

Gunet Open Eclass

Open Eclass Platform

References · 6

• 🔥 https://exploit-db.com/exploits/48163 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37115 · Security Note
• https://osv.dev/vulnerability/CVE-2020-37115 · Vendor Advisory
• https://download.openeclass.org/files/docs/1.7/CHANGES.txt · Patch
• https://vulncheck.com/advisories/gunet-openeclass-e-learning-platform-plaintext-password-storage · Note
• https://openeclass.org · Note