High severity7.5NVD Advisory· Published Dec 23, 2020· Updated Jun 17, 2026
CVE-2020-29550
CVE-2020-29550
Description
An issue was discovered in URVE Build 24.03.2020. The password of an integration user account (used for the connection of the MS Office 365 Integration Service) is stored in cleartext in configuration files as well as in the database. The following files contain the password in cleartext: Profiles/urve/files/sql_db.backup, Server/data/pg_wal/000000010000000A000000DD, Server/data/base/16384/18617, and Server/data/base/17202/8708746. This causes the password to be displayed as cleartext in the HTML code as roomsreservationimport_password in /urve/roomsreservationimport/roomsreservationimport/update-HTML5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- URVE/URVEdescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/160726/URVE-Software-Build-24.03.2020-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/Dec/49nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-042.txtnvdExploitThird Party Advisory
- urve.co.uk/system-rezerwacji-salnvdVendor Advisory
News mentions
0No linked articles in our index yet.