Beveiligingsadvies

CVE-2020-28856

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-14 17:59:04

Laatst bijgewerkt 2026-07-09 00:11:52

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access controls.

← Alle CVE's bekijken Bekijk op cve.org ↗