CVE-2020-7000

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.

VISAM VBASE Editor versión 11.5.0.2 y VBASE Web-Remote Module, pueden permitir a un atacante no autenticado detectar la clave criptográfica del servidor web y conseguir información sobre el inicio de sesión y el mecanismo de cifrado/descifrado, lo que puede ser explotado para omitir la autenticación de la Interfaz web HMI de HTML5.