During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.
References
Link | Resource |
---|---|
https://www.johnsoncontrols.com/cyber-solutions/security-advisories | Patch Vendor Advisory |
https://www.us-cert.gov/ics/advisories/ICSA-20-142-01 | Third Party Advisory US Government Resource |
https://www.johnsoncontrols.com/cyber-solutions/security-advisories | Patch Vendor Advisory |
https://www.us-cert.gov/ics/advisories/ICSA-20-142-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.johnsoncontrols.com/cyber-solutions/security-advisories - Patch, Vendor Advisory | |
References | () https://www.us-cert.gov/ics/advisories/ICSA-20-142-01 - Third Party Advisory, US Government Resource | |
CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 9.9 |
Information
Published : 2020-05-21 15:15
Updated : 2024-11-21 05:39
NVD link : CVE-2020-9045
Mitre link : CVE-2020-9045
CVE.ORG link : CVE-2020-9045
JSON object : View
Products Affected
tyco
- victor_video_management_system
johnsoncontrols
- c-cure_9000_firmware
CWE
CWE-312
Cleartext Storage of Sensitive Information