CVE-2020-27182

Mô tả

Tham khảo

• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-publixone · Third Party Advisory
• seclists.org/fulldisclosure/2020/Oct/28 · Mailing List

Lỗ hổng khác của publixone

• CVE-2020-27183NGHIÊM TRỌNG 9.8A RemoteFunctions endpoint with missing access control in konzept-ix publiXone before 2020.015 allows attackers to disclose sensitive user i…
• CVE-2020-27181TRUNG BÌNH 6.5A hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020.015 allows attackers to craft password-reset …
• CVE-2020-27180CAO 7.5konzept-ix publiXone before 2020.015 allows attackers to download files by iterating over the IXCopy fileID parameter.
• CVE-2020-27179NGHIÊM TRỌNG 9.8konzept-ix publiXone before 2020.015 allows attackers to take over arbitrary user accounts by crafting password-reset tokens.