CVE-2020-14944

Katalog CVE

CVSS 9.8 · Critical EPSS 6,3%

Kerentanan Missing Authorization pada globalradar bsa radar. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.

Rincian

Terbit di NVD

22 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

6,3% peluang dieksploitasi; lebih tinggi dari 93,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/158372/BSA-Radar-1.6.7234.24750-Cross-Site-Request-Forgery.html exploit · advisory pihak ketiga · vdb entry
• https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities advisory pihak ketiga
• https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14944%20-%20Access%20Control... exploit · advisory pihak ketiga