ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-25184”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-25184
Published
2022-03-18
CVSS:
7.8
ShadowTrackr CVSS:
6.4
Summary:
Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local, unauthenticated attacker could compromise the user passwords, resulting in information disclosure.