nvd-json-data-feeds/CVE-2020/CVE-2020-105xx/CVE-2020-10553.json

{
  "id": "CVE-2020-10553",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2021-02-05T20:15:12.827",
  "lastModified": "2024-11-21T04:55:34.227",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\\Psyprax32\\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 un problema en Psyprax versiones anteriores a 3.2.2. El archivo %PROGRAMDATA%\\Psyprax32\\PPScreen.ini contiene un hash para la pantalla de bloqueo (tambi\u00e9n se conoce como protector de pantalla) de la aplicaci\u00f3n. Si esa entrada es eliminada, la pantalla de bloqueo ya no es mostrada y la aplicaci\u00f3n ya no est\u00e1 bloqueada. Todos los usuarios locales pueden ser capaces de modificar ese archivo"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:psyprax:psyprax:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "3.2.2",
              "matchCriteriaId": "2BF504F8-37CA-41C2-8A4A-78CD57197D2C"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax",
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}