CVE-2020-27180

Description

References

• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-publixone · Third Party Advisory
• seclists.org/fulldisclosure/2020/Oct/28 · Mailing List

Weitere Schwachstellen in publixone

• CVE-2020-27183KRITISCH 9.8A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user i…
• CVE-2020-27182MITTEL 6.1Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaS…
• CVE-2020-27181MITTEL 6.5A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset …
• CVE-2020-27179KRITISCH 9.8konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens.