CVE-2020-9425: High severity rConfig rConfig vulnerability
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the rest of the page still executed, resulting in the disclosure of cleartext credentials in the response.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rConfigto a version that resolves this vulnerability.Fixed in 3.9.4
Event History
Frequently Asked Questions
What is CVE-2020-9425?
CVE-2020-9425 is a vulnerability in the rConfig software before version 3.9.4 that allows an unauthenticated attacker to retrieve saved cleartext credentials.
How severe is CVE-2020-9425?
CVE-2020-9425 has a severity rating of 7.5, which is considered high.
How can an attacker exploit CVE-2020-9425?
An attacker can exploit CVE-2020-9425 by sending a GET request to settings.php and retrieve saved cleartext credentials.
What is the affected software version for CVE-2020-9425?
The affected software version for CVE-2020-9425 is rConfig before version 3.9.4.
How can I fix CVE-2020-9425?
To fix CVE-2020-9425, update rConfig to version 3.9.4 or newer.