Beveiligingsadvies

CVE-2020-25239

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-03-15 17:03:30
Laatst bijgewerkt 2024-08-04 15:33:05
Toegewezen door siemens
CVSS-score geen score
Status PUBLISHED

Beschrijving

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.