CVE-2020-7196

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url "/bdswebui/assignusers/".

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71979.8SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray managerCVE-2020-71988.8There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has CVE-2020-71999.8A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure ManagemenCVE-2020-72009.8A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploiteCVE-2020-72018.8A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. CVE-2020-72025.3A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. CVE-2020-72039.8A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability could be exploited tCVE-2020-72056.7A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKitCVE-2020-72069.8HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.CVE-2020-72076.8A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation ECVE-2020-72086.1LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.CVE-2020-72099.8LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.