CVE-2020-9425 Information disclosure in n/a
Unauthenticated attackers can retrieve saved cleartext credentials from rConfig due to improper page execution after a redirect.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-9425?
CVE-2020-9425 is a high-severity vulnerability in n/a, published on 20 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the rest of the page still executed, resulting in the disclosure of cleartext credentials in the response.
Weakness: CWE-670
Which versions are affected by CVE-2020-9425?
It affects 1 product.
Products include Rconfig Rconfig.
How do I fix CVE-2020-9425?
No fix has been published for CVE-2020-9425 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-9425 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-9425 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gvgg-46qc-f5hw.