CVE-2020-13419

Mô tả

Tham khảo

• Accenture/AARO-Bugs · Third Party Advisory

Lỗ hổng khác của openiam

• CVE-2020-13422CAO 8.1OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
• CVE-2020-13421NGHIÊM TRỌNG 9.8OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
• CVE-2020-13420NGHIÊM TRỌNG 9.8OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
• CVE-2020-13418TRUNG BÌNH 6.1OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.