What is CVE-2020-10553?

CVE-2020-10553 is a medium-severity vulnerability in Psyprax, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 5.5/10. Published 2021-02-05.

How severe is CVE-2020-10553?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Psyprax

CVE-2020-10553

An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.

EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Psyprax
N/a — versions n/a

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-10553?: CVE-2020-10553 is a medium-severity vulnerability in Psyprax, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 5.5/10. Published 2021-02-05.
How severe is CVE-2020-10553?: Medium severity. CVSS v3 base score is 5.5 out of 10.