Most recent entries from all

bdu:2020-02816

cnvd-2020-32663

EUVD-2026-231263

fkie_cve-2020-10632

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.

GHSA-mgx9-f28j-xh8r

gsd-2020-10632

ICSA-20-140-02 — Emerson OpenEnterprise

The affected components may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.CVE-2020-10640 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Inadequate folder security permissions may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.CVE-2020-10632 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Inadequate encryption may allow the passwords for OpenEnterprise user accounts to be obtained.CVE-2020-10636 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).