Description
Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sunnet | eHRD | 8, 9 | — |
High · 7.5
CVE-2020-10508
EUVD-2020-2961GHSA-9wpp-5pc6-8pjq
Sunnet eHRD - Sensitive Data Exposure
Published Mar 27, 2020 · Updated Sep 16, 2024 · Assigned by twcert