CVE-2020-26515 - CVE House
Back to Database
Status published High CVE-2020-26515

An insufficiently protected credentials issue was discovered in Intland codeBeamer...

Vulnerability Description

An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie (CB_LOGIN) issued by the application contains the encrypted user's credentials. However, due to a bug in the application code, those credentials are encrypted using a NULL encryption key.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26515

Credits & Attribution

No credits recorded in the NVD database.

References

More from intland

View All →
CVE-2020-26517
A cross-site scripting (XSS) issue was discovered in Intland codeBeamer...
Medium 4.8
CVE-2020-26516
A CSRF issue was discovered in Intland codeBeamer ALM 10.x...
High 8.8
CVE-2020-26513
An issue was discovered in Intland codeBeamer ALM 10.x through...
Medium 5.5
CVE-2019-20635
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to...
Medium 6.1
CVE-2019-19913
In Intland codeBeamer ALM 9.5 and earlier, there is stored...
Medium 4.8

Affected Vendor

Affected Software

codebeamer
Vulnerable Versions:
10.0.0, 10.1.0

Timeline

Official Publish: June 8th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.