CVEvulnerability
CVE-2020-9045
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-05-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-312
Description
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.
Affected configurations
• tyco victor video management system 5.2
• johnsoncontrols c-cure 9000 firmware 2.70
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories Patch, Vendor Advisory
- https://www.us-cert.gov/ics/advisories/ICSA-20-142-01 Third Party Advisory, US Government Resource
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories Patch, Vendor Advisory
- https://www.us-cert.gov/ics/advisories/ICSA-20-142-01 Third Party Advisory, US Government Resource