Multiple vulnerabilities in GE Digital APM Classic
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2020-16240 CVE-2020-16244 |
| CWE-ID | CWE-759 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
APM Classic Server applications / Other server solutions |
| Vendor | GE Digital |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Authorization bypass through user-controlled key
EUVDB-ID: #VU46985
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2020-16240
CWE-ID: N/A
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain unauthorized access to sensitive information on the system.
The vulnerability exist due to an insecure direct object reference (IDOR) issue. A remote attacker can download sensitive data related to user accounts without having the proper privileges.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAPM Classic: - - 4.4
CPE2.3 External linkshttps://ics-cert.us-cert.gov/advisories/icsa-20-266-01
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Use of a One-Way Hash without a Salt
EUVDB-ID: #VU46986
Risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2020-16244
CWE-ID:
CWE-759 - Use of a One-Way Hash without a Salt
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to sensitive information on the system.
The vulnerability exists due to salt is not used for hash calculation of passwords, making it possible to decrypt passwords. A remote administrator can retrieve all user account data and then retrieve the actual passwords.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAPM Classic: - - 4.4
CPE2.3 External linkshttps://ics-cert.us-cert.gov/advisories/icsa-20-266-01
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
