Security Advisory

CVE-2020-25845

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-31 07:45:47
Last updated 2024-09-16 18:08:11
Assigner twcert
State PUBLISHED

Description

Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of users credential.