HIGH

CVE-2020-9425

CVSS v3

7.5

HIGH

EPSS Score

49.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the rest of the page still executed, resulting in the disclosure of cleartext credentials in the response.

Technical details

Published
3/20/2020

Frequently asked questions

What is CVE-2020-9425?

An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the rest of the page still executed, resulting in the disclosure of cleartext credentials in the response.

Is CVE-2020-9425 actively exploited?

Active exploitation of CVE-2020-9425 has not been confirmed. The EPSS score is 49.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-9425?

CVE-2020-9425 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2020-9425 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.