CVE-2020-37115

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.

Score

CVSS 4.0 7.1 High

Status

Analyzed - disclosure@vulncheck.com

Published

2026-02-03

Last modified

2026-07-28

Weaknesses

CWE-256

Affected products

• Open Eclass Platform (Gunet)
• Openeclass (Openeclass)

References

• https://download.openeclass.org/files/docs/1.7/CHANGES.txt
• https://www.exploit-db.com/exploits/48163
• https://www.openeclass.org/
• https://www.vulncheck.com/advisories/gunet-openeclass-e-learning-platform-plaintext-password-storage