CVE-2020-25239CWE-863

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0)

published March 15, 2021

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00973 · 61.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-03-15T17:03Z
EPSS history
Timeline
  • 15 MAR 17:03Z
    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0)
    cvelistv5