CVE-2020-25842

CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access

High · published December 31, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00508 · 42.5th percentile
Published
2020-12-31T07:45Z
EPSS history
Timeline
  • 31 DEC 07:45Z
    CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access
    cvelistv5