Vulnerability in Urve
CVE-2020-29550
An issue was discovered in URVE Build 24.03.2020. The password of an integration user account (used for the connection of the MS Office 365 Integration Service) is stored in cleartext in configuration files as well as in the database. The following files contain the password in cleartext: Profiles/urve/files/sql_db.backup, Server/data/pg_wal/000000010000000A000000DD, Server/data/base/16384/18617, and Server/data/base/17202/8708746. This causes the password to be displayed as cleartext in the HTML code as roomsreservationimport_password in /urve/roomsreservationimport/roomsreservationimport/update-HTML5.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.014 (72.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 72nd percentile — 72.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: +0.000
Affected products
- Urve — versions 24.03.2020
Weakness classification (CWE)
Public proof-of-concept exploits
References
- urve.co.uk/system-rezerwacji-sal (Vendor Advisory)
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-042.txt (Exploit, Third Party Advisory)
- seclists.org/fulldisclosure/2020/Dec/49 (mailing-list, Exploit, Mailing List, Third Party Advisory)
- packetstormsecurity.com/files/160726/URVE-Software-Build-24.03.2020-Information… (Exploit, VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-29550?
- CVE-2020-29550 is a high-severity vulnerability in Urve, classified under Cleartext Storage of Sensitive Information. CVSS score: 7.5/10. Published 2020-12-23.
- How severe is CVE-2020-29550?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2020-29550 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.