Beveiligingsadvies

CVE-2020-36902

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-10 21:05:41

Laatst bijgewerkt 2025-12-11 18:52:29

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗