GE Digital APM Classic
Successful exploitation of these vulnerabilities could allow access to sensitive information.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-16244US | high7.2 | — | ||
GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR v… | ||||
| CVE-2020-16240US | medium5.3 | — | ||
GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JS… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationAPM Classic
The GE user advisory can be accessed on the GE Digital Support Customer Center website (login required).
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdigitalsupport.ge.com%2Fcommunities%2Fen_US%2FArticle%2FGE-Digital-Security-Advisory-GED-20-04&data=02%7C01%7Ckent.norris%40inl.gov%7C62b1454f1f0643abf8fb08d85e33a0fe%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637362923129050441&sdata=Ls9sA%2F%2BY9wysaTIide8rz4KtQ2sWgxWtNoTKdShf0OI%3D&reserved=0 - MitigationAPM Classic
The GE user advisory can be accessed on the GE Digital Support Customer Center website (login required).
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdigitalsupport.ge.com%2Fcommunities%2Fen_US%2FArticle%2FGE-Digital-Security-Advisory-GED-20-04&data=02%7C01%7Ckent.norris%40inl.gov%7C62b1454f1f0643abf8fb08d85e33a0fe%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637362923129050441&sdata=Ls9sA%2F%2BY9wysaTIide8rz4KtQ2sWgxWtNoTKdShf0OI%3D&reserved=0 - FixedAPM Classic
GE Digital APM Classic 4.5 contains mitigations for these vulnerabilities. GE Digital recommends all users upgrade to GE Digital APM Classic 4.5 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative.
https://digitalsupport.ge.com/communities/CC_Contact - FixedAPM Classic
GE Digital APM Classic 4.5 contains mitigations for these vulnerabilities. GE Digital recommends all users upgrade to GE Digital APM Classic 4.5 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative.
https://digitalsupport.ge.com/communities/CC_Contact
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan