VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10601
Reference (s):
- https://www.us-cert.gov/ics/advisories/icsa-20-084-01