VULNERABILITY INTELLIGENCE

CVE-2020-10554

CVSS score7.5 HIGH
EPSS probability0.77%
CISA KEVNot currently listed
Published2021-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored in the database in an obfuscated format, which can be easily reverted. For example, the password AAAAAAAA is stored in the database as MMMMMMMM.

Weakness classification

  • CWE-326: Inadequate Encryption Strength
  • CWE-522: Insufficiently Protected Credentials

Primary references