CVE-2020-12528CWE-269

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2

Medium · published March 2, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-03-02T21:15Z
EPSS history
Timeline
  • 02 MAR 21:15Z
    An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2
    cvelistv5