CVE-2020-25917

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control

published December 26, 2020

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser.do page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01256 · 69.3th percentile
Published
2020-12-26T01:50Z
EPSS history
Timeline
  • 26 DEC 01:50Z
    Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control
    cvelistv5