« Volver al listado

CVE-2020-9404

Estado: ModificadaAlta (7.1)—

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pactware — Pactware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9404",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-08-11T19:15:17.813",
  "references": [
    {
      "url": "https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords."
    },
    {
      "lang": "es",
      "value": "En PACTware versiones anteriores a 4.1 SP6 y versiones 5.x anteriores a 5.0.5.31, las contraseñas son almacenadas de manera no segura y pueden ser modificadas por parte de un atacante sin conocimiento de las contraseñas actuales"
    }
  ],
  "lastModified": "2026-06-17T03:27:53.140",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pactware:pactware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FACE277-1B53-4058-9EF2-62715C2296F2",
              "versionEndExcluding": "5.0.5.31",
              "versionStartIncluding": "5.0"
            },
            {
              "criteria": "cpe:2.3:a:pactware:pactware:2.4:sp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37AF7BDA-BF63-4D96-B785-D0217729667A"
            },
            {
              "criteria": "cpe:2.3:a:pactware:pactware:3.0:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE07D844-ECB6-4867-925B-06650890D742"
            },
            {
              "criteria": "cpe:2.3:a:pactware:pactware:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5261A2D7-FB0B-4A2E-9259-E4239DFBA581"
            },
            {
              "criteria": "cpe:2.3:a:pactware:pactware:3.6:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F23F58EF-FAB6-4BDD-A8C7-20772C960D29"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}