CVE-2020-24227

Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.40% chance of exploitation in the next 30 days, 71th percentile

Published

2020-11-23

Updated

2024-08-04

Proof-of-concept exploits (1)

• nathunandwani/CVE-2020-242279★ · 2020-11-21

References

• CVE Record
• NVD entry

Related

• CVE-2020-24223
• CVE-2020-24241
• CVE-2020-24221
• CVE-2020-24242
• CVE-2020-24219
• CVE-2020-24265