What is CVE-2020-16244?

CVE-2020-16244 is a high-severity vulnerability in Ge Asset_performance_management_classic, classified under CWE-759. CVSS score: 7.2/10. Published 2020-09-23.

How severe is CVE-2020-16244?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Ge Asset_performance_management_classic

CVE-2020-16244

GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR vulnerability, puts the entire platform at high risk because…

EPSS: 0.007 (47.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ge Asset_performance_management_classic
N/a Ge Digital Apm Classic — versions Versions 4.4 and prior

Weakness classification (CWE)

CWE-759

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-16244?: CVE-2020-16244 is a high-severity vulnerability in Ge Asset_performance_management_classic, classified under CWE-759. CVSS score: 7.2/10. Published 2020-09-23.
How severe is CVE-2020-16244?: High severity. CVSS v3 base score is 7.2 out of 10.