CVEvulnerability

CVE-2020-11720

9.8 CRITICAL Published 2020-12-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-798

Description

An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password 0000. After the installation, users/admins are not prompted to change this password.

Affected configurations

• bilanc bilanc (<= 014 31.01.2020)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References