Vulnetix
Try Vulnetix Request Demo
CVE-2020-28390 PUBLISHED CVSS 5.5 MEDIUM

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.

EPSS 0.05% · 14.6th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.05%
14.6th percentile

Affected Products

VendorProductVersions
SiemensOpcenter Execution CoreV8.2, V8.3
siemensopcenter_execution_core8.2, 8.3

Timeline

References

Open in Interactive Console →