CVE-2020-16240CWE-639

GE Digital APM Classic, Versions 4.4 and prior

published September 23, 2020

CVSS
—
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JSON) format by users who should not have access to such functionality. An attacker can download sensitive data related to user accounts without having the proper privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00898 · 59.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2020-09-23T13:06Z
EPSS history
Timeline
  • 23 SEP 13:06Z
    GE Digital APM Classic, Versions 4.4 and prior
    cvelistv5