CVE-2020-9045

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.

• CWE-312
• CWE-312

• https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesPatch, Vendor Advisory
• https://www.us-cert.gov/ics/advisories/ICSA-20-142-01Third Party Advisory, US Government Resource
• https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesPatch, Vendor Advisory
• https://www.us-cert.gov/ics/advisories/ICSA-20-142-01Third Party Advisory, US Government Resource

Published

May 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9039Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 th…9.8
• CVE-2020-9040Couchbase Server Java SDK before 2.7.1.1 allows a potential …7.5
• CVE-2020-9041In Couchbase Server 6.0.3 and Couchbase Sync Gateway through…7.5
• CVE-2020-9042In Couchbase Server 6.0, credentials cached by a browser can…8.8
• CVE-2020-9043The wpCentral plugin before 1.5.1 for WordPress allows discl…8.8
• CVE-2020-9044XXE vulnerability exists in the Metasys family of product We…9.1
• CVE-2020-9046A vulnerability in all versions of Kantech EntraPass Edition…7.8
• CVE-2020-9047A vulnerability exists that could allow the execution of una…7.2
• CVE-2020-9048A vulnerability in specified versions of American Dynamics v…8.1
• CVE-2020-9049A vulnerability in specified versions of American Dynamics v…5.3
• CVE-2020-9050Path Traversal vulnerability exists in Metasys Reporting Eng…7.5
• CVE-2020-9051Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…