CVE-2020-7196

2020-10-2615:05:48

hpe

www.cve.org

0.001 Low

EPSS

Percentile

25.4%

JSON

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url “/bdswebui/assignusers/”.

CNA Affected

[
  {
    "product": "BlueData EPIC Software; HPE Ezmeral Container Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 and earlier"
      },
      {
        "status": "affected",
        "version": "5.0"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04049en_us

0.001 Low

EPSS

Percentile

25.4%

JSON

Related for CVELIST:CVE-2020-7196