CVE-2020-14944

CRITICAL 9.8EPSS 6.3%

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.

CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 6.34% chance of exploitation in the next 30 days, 93th percentile
Published: 2020-06-22
Updated: 2024-08-04

Proof-of-concept exploits (2)

ExploitDB entries (1)

https://www.exploit-db.com/exploits/48653

References

Related