CVE-2020-10601

Summary

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash.

Affected Software

VendorProductVersion RangeStatus
VISAMVBASE Editor11.5.0.2affected
VISAMVBASE Web-Remote Moduleallaffected

Weaknesses

  • CWE-326: INADEQUATE ENCRYPTION STRENGTH CWE-326

ADP Enrichment

CVE Program Container

Additional References

References