Vulnerability in Abb Esoms
CVE-2019-19096
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.
EPSS: 0.001 (15.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Abb Esoms — versions 6.0 to 6.0.2
Weakness classification (CWE)
References
- search.abb.com/library/Download.aspx (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-19096?
- CVE-2019-19096 is a medium-severity vulnerability in Abb Esoms, classified under Storing Passwords in a Recoverable Format. CVSS score: 6.1/10. Published 2020-04-02.
- How severe is CVE-2019-19096?
- Medium severity. CVSS v3 base score is 6.1 out of 10.