CVE-2020-7378 in OpenCRXinformazioni

Riassunto

di MITRE • 25/11/2020

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in version 5.0-20200904, released September 4, 2020.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Rapid7, Inc.

Prenotare

21/01/2020

Divulgazione

25/11/2020

Moderazione

accettato

CPE

pronto

EPSS

0.02617

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-7378
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-7378
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-7378/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!