CVE-2020-11560: High severity nch software express invoice vulnerability

Published Apr 7, 2020

Updated

NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.

Affected Software

1 affected component

Nchsoftware Express Invoice=7.25

Event History

Apr 7, 2020

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2020-11560?

CVE-2020-11560 is a vulnerability in NCH Express Invoice 7.25 that allows local users to discover the cleartext password by reading the configuration file.

How does CVE-2020-11560 affect NCH Express Invoice?

CVE-2020-11560 affects NCH Express Invoice 7.25 and allows local users to discover the cleartext password by reading the configuration file.

What is the severity of CVE-2020-11560?

The severity of CVE-2020-11560 is high with a CVSS score of 7.8.

How can local users exploit CVE-2020-11560?

Local users can exploit CVE-2020-11560 by reading the configuration file to discover the cleartext password.

Is there a fix for CVE-2020-11560?

At the moment, there is no known fix for CVE-2020-11560. It is recommended to upgrade to a newer version of NCH Express Invoice if available or take other security measures.