CVE-2020-37115
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Feb 3, 2026
CISA due date
—
The record
GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. CWE-256
- CVE-2026-15933 OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. CWE-256
- CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. CWE-256
- CVE-2026-55164 Lemur manages TLS certificate creation. CWE-256
- CVE-2026-14867 Credentials of built-in users are insecurely stored in the User directory of PcVue… CWE-256
- CVE-2026-57302 Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml… CWE-256
- CVE-2026-50268 Steeltoe is an open source project that provides a collection of libraries that helps… CWE-256
- CVE-2024-39575 update_disk_psu_baseline.sh requires password in plain text CWE-256