CVE-2020-15151CWE-203

Observable Timing Discrepancy in OpenMage LTS

High · published August 19, 2020

CVSS v3.1
8.0
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. This issue is related to Adobe's CVE-2020-9690. It is patched in versions 19.4.6 and 20.0.2.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.3th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2020-08-19T18:10Z
EPSS history
Timeline
  • 19 AUG 18:10Z
    Observable Timing Discrepancy in OpenMage LTS
    cvelistv5