CVE-2020-23249: Gigamon gigavue-os cleartext storage of sensitive data vulnerability

Gigamon · Gigavue Os

GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.

4.7 CVSS 3.1 Medium EPSS 0.37% · top 71.6% CWE-312 · Cleartext storage of sensitive data

4.7CVSS 3.1 base score, v2 4.0

0.37%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Gigavue Os Gigamon

References

Link	Tags
https://community.gigamon.com/gigamoncp/s/article/Field-Notice-Gigamon-addressing-multiple-vulnerabilities-in-GigaVUE-OS	Vendor Advisory
https://community.gigamon.com/gigamoncp/s/article/Field-Notice-Gigamon-addressing-multiple-vulnerabilities-in-GigaVUE-OS	Vendor Advisory

Track CVE-2020-23249 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2026-36848Gigamon gigavue-os path traversal vulnerabilityGigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.EPSS 0.93%29 Jun 2026 6.1CVE-2023-0746Gigamon gigavue-os cross-site scripting vulnerabilityThe help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user…EPSS 0.35%10 Mar 2023 2.3CVE-2020-23250Gigamon gigavue-os broken cryptographic algorithm vulnerabilityGigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.EPSS 0.20%5 Jan 2021 5.7CVE-2011-4723D-Link DIR-300 router stores passwords in cleartextThe D-Link DIR-300 router stores passwords in cleartext rather than in a protected form. Anyone who can reach the stored data can read credentials di…KEVEPSS 3.1%analysed20 Dec 2011

Source: NIST National Vulnerability Database (record CVE-2020-23249), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.