VULNERABILITY INTELLIGENCE
CVE-2020-10552
CVSS score8.1 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2021-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as well.
Weakness classification
- CWE-1188: Initialization of a Resource with an Insecure Default
Primary references
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory