What is CVE-2020-10552?

CVE-2020-10552 is a high-severity vulnerability in Psyprax, classified under Initialization of a Resource with an Insecure Default. CVSS score: 8.1/10. Published 2021-02-05.

How severe is CVE-2020-10552?

High severity. CVSS v3 base score is 8.1 out of 10.

RCE in Psyprax

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.

EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Psyprax
N/a — versions n/a

Weakness classification (CWE)

CWE-1188 — Initialization of a Resource with an Insecure Default

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-10552?: CVE-2020-10552 is a high-severity vulnerability in Psyprax, classified under Initialization of a Resource with an Insecure Default. CVSS score: 8.1/10. Published 2021-02-05.
How severe is CVE-2020-10552?: High severity. CVSS v3 base score is 8.1 out of 10.