CVE-2020-8482

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-922

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-84847.8Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attackeCVE-2020-84857.8Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attCVE-2020-84867.8Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker aCVE-2020-84877.8Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker aCVE-2020-84887.8Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables aCVE-2020-84897.8Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enaCVE-2020-84926.5Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct CVE-2020-84934.8A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fielCVE-2020-84948.8In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attaCVE-2020-84957.5In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attaCVE-2020-84964.8In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the ApplicCVE-2020-84975.3In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user n