Beveiligingsadvies

CVE-2020-36892

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-10 20:52:17

Laatst bijgewerkt 2026-04-07 14:04:59

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗