Insecure User/Password Encryption Vulnerability in JOE Component of SOS JobScheduler

CVE-2020-12712 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile.

Learn more about our User Device Pen Test.