Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2020-24680

Improper Credential Storage in Symphony Plus

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB ABB Ability™ Symphony® Plus Operations

  • unspecified to < 3.3 Service Pack 1affected
  • unspecified to < 2.1 SP2 Rollup 2affected
  • unspecified to < 2.2affected

ABB ABB Ability™ Symphony® Plus Historian

  • unspecified to < 3.2affected

References