Ge Asset_performance_management_classic
2 CVEs affecting Ge Asset_performance_management_classic. Latest disclosed: 2020-09-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-16244 | High | 7.2 | 2020-09-23 | GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw… |
CVE-2020-16240 | Medium | 5.3 | 2020-09-23 | GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScrip… |