1. Home
  2. CVE Database
  3. CVE-2020-11720
CRITICAL · 9.8

CVE-2020-11720

An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password...

Vulnerability Description

An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password 0000. After the installation, users/admins are not prompted to change this password.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BilancBilanc<= 014_31.01.2020

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2020-11720?

CVE-2020-11720 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password...

How severe is CVE-2020-11720?

CVE-2020-11720 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-11720?

Check the references section above for vendor advisories and patch information. Affected products include: Bilanc Bilanc.