CVE-2020-25917

ALTO 8.8CVE-2020-25917 · Published 26/12/2020 · updated 17/06/2026

In breve

CVE-2020-25917 è una vulnerabilità ALTO (CVSS 8.8) che riguarda notouch center (stratodesk).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 69.7% delle vulnerabilità.
Correzione: aggiornare a 4.4.68 o successiva.

Package	Affected versions	Patched versions
notouch center stratodesk	`< 4.4.68`	`4.4.68`

Description

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.

References

packetstormsecurity.com/files/160652/Stratodesk-NoTouch-Center-Privilege-Escalation.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free