CVE-2020-37115 HIGH

CVE-2020-37115: GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

Vendor Openeclass
Product GUnet OpenEclass
Weakness CWE-256
Published February 3, 2026
Last update February 4, 2026
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.

Key dates

02Disclosure timeline

February 3, 2026 CVE published
February 4, 2026 Record updated