Clear Text Storage of Credentials in ABB eSOMS Redis Data Structure Component

CVE-2019-19096 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.

Learn more about our Web Application Penetration Testing UK.