1. Home
  2. CVE Database
  3. CVE-2020-8995
CRITICAL · 9.8

CVE-2020-8995

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastru...

Vulnerability Description

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BilancBilanc<= 014_31.01.2020

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2020-8995?

CVE-2020-8995 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastru...

How severe is CVE-2020-8995?

CVE-2020-8995 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-8995?

Check the references section above for vendor advisories and patch information. Affected products include: Bilanc Bilanc.