cve-2020-10546

{
  "cvss": 0.0,
  "datePublished": "2023-11-13T00:00:00Z",
  "dateUpdated": "2023-11-13T00:00:00Z",
  "description": "rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.",
  "dueDate": "",
  "id": "CVE-2020-10546",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "rConfig",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "rConfig rConfig Improper Neutralization of Special Elements used in an SQL Command",
  "vendor": "rConfig"
}