CVE-2020-13473: Medium severity nch software express accounts vulnerability
Published Dec 28, 2020
·Updated
NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.
Affected Software
1 affected component
Nchsoftware Express Accounts<=8.24
Event History
Dec 28, 2020
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
Description
Frequently Asked Questions
1
What is CVE-2020-13473?
CVE-2020-13473 is a vulnerability in NCH Express Accounts 8.24 and earlier, allowing local users to discover the cleartext password by reading the configuration file.
2
How severe is CVE-2020-13473?
CVE-2020-13473 has a severity rating of 5.5, which is considered medium.
3
How does CVE-2020-13473 affect NCH Express Accounts?
CVE-2020-13473 affects NCH Express Accounts versions 8.24 and earlier, allowing local users to discover the cleartext password.
4
Is there a fix for CVE-2020-13473?
To fix CVE-2020-13473, it is recommended to update NCH Express Accounts to a version that is not vulnerable.
5
What can I do to mitigate the risk of CVE-2020-13473?
To mitigate the risk of CVE-2020-13473, ensure that unauthorized users do not have access to the configuration file of NCH Express Accounts.