CVE-2020-9404

Published: Aug 11, 2020Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

In PACTware before 4.1 SP6 and 5.x before 5.0.5.31, passwords are stored in an insecure manner, and may be modified by an attacker with no knowledge of the current passwords.

Affected (5)

Products: Pactware: Pactware

Pactware

1 product

Pactware

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Pactware Pactware	From 5.0 to 5.0.5.31
Pactware Pactware	Version 2.4 sp5
Pactware Pactware	Version 3.0 sp4
Pactware Pactware	Version 3.5
Pactware Pactware	Version 3.6 sp1

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf

Source: cve@mitre.org

Vendor Advisory

https://pactware.com/fileadmin/user_upload/Cyber-Security-Documents/2020-05-29_published_PWC_CyberSecurityNotifications-CVE-2020-9403-9404__002_.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.