CVE-2020-14017

An issue was discovered in Navigate CMS 2.9 r1433

published June 24, 2020

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the contents of this file to discover details about a session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01165 · 67.0th percentile
Published
2020-06-24T14:24Z
EPSS history
Timeline
  • 24 JUN 14:24Z
    An issue was discovered in Navigate CMS 2.9 r1433
    cvelistv5