CVE-2020-27180

Mô tả

Tham khảo

• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-publixone · Third Party Advisory
• seclists.org/fulldisclosure/2020/Oct/28 · Mailing List

Lỗ hổng khác của publixone

• CVE-2020-27183NGHIÊM TRỌNG 9.8A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user i…
• CVE-2020-27182TRUNG BÌNH 6.1Multiple cross-site scripting (XSS) vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaS…
• CVE-2020-27181TRUNG BÌNH 6.5A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset …
• CVE-2020-27179NGHIÊM TRỌNG 9.8konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens.