CVE-2020-7196

Description

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url /bdswebui/assignusers/.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.158

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-7196 are affected in bluedata_epic 4.0	NCM
Vulnerabilities CVE-2020-7196 are affected in ezmeral_container_platform 5.0	NCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-7196)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234