CVE-2020-9045
Published: May 21, 2020
Modified: Aug 4, 2024
CVSS v3.1
9.9
Description
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.
| Vendor | Product | Versions |
|---|---|---|
Johnson Controls | Software House C•CURE 9000 v2.70 | affected 2.70 |
Johnson Controls | American Dynamics victor Video Management System v5.2 | affected 5.2 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now