GE Digital APM Classic

Summary

Vulnerabilities 2

• Unscored —
  CVE-2020-16240

  GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user ac…

  Sep 23, 2020
• Unscored —
  CVE-2020-16244

  GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible …

  Sep 23, 2020

Revision history

1. 2020-09-22 #1

   ICSA-20-266-01 GE APM Classic

References

• ICS Advisory ICSA-20-266-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-20-266-01
• Recommended Practices
  https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B