CVE-2020-10375
 
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in an obfuscated format that can be easily reversed. The file data.mdb contains these obfuscated passwords in the second column. NOTE: this is unrelated to the popular Smarty template engine product.
Se detectó un problema en New Media Smarty versiones anteriores a 9.10. Las contraseñas son almacenadas en la base de datos en un formato ofuscado que puede ser revertido fácilmente. El archivo data.mdb contiene estas contraseñas ofuscadas en la segunda columna. NOTA: esto no está relacionado con el popular producto de motor de plantillas Smarty
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-03-10 CVE Reserved
- 2021-02-05 CVE Published
- 2024-06-10 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-326: Inadequate Encryption Strength
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://www.smarty-online.de | Product |
URL | Date | SRC |
---|---|---|
https://www.x41-dsec.de/lab/advisories/x41-2020-005-smarty | 2024-08-04 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Newmediacompany Search vendor "Newmediacompany" | Smarty Search vendor "Newmediacompany" for product "Smarty" | < 9.10 Search vendor "Newmediacompany" for product "Smarty" and version " < 9.10" | - |
Affected
|