CVE-2020-29165

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges

published February 3, 2021

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

⚠️ A simple oversight in access control could let anyone become an admin in PacsOne Server versions below 7.1.1! Think of it as a VIP event where anyone can slip past the rope without checking in — just because the bouncer forgot to check their list! This could lead to unauthorized users running wild in your system, accessing sensitive data, changing settings, or even wreaking havoc. Imagine the chaos if someone with the wrong intentions holds the keys to the kingdom!

Put simply

Think of it as a VIP event where anyone can slip past the rope without checking in — just because the bouncer forgot to check their list! The vulnerability arises from improper access controls that fail to restrict user permissions correctly, allowing remote attackers to gain administrator-level access without proper authentication.

What to do

This could lead to unauthorized users running wild in your system, accessing sensitive data, changing settings, or even wreaking havoc. Imagine the chaos if someone with the wrong intentions holds the keys to the kingdom! To secure your system, upgrade to PacsOne Server version 7.1.1 or later immediately. Additionally, review your access control settings to ensure proper restrictions are in place. Regular audits can also help spot any lingering issues. You've got this! Stay vigilant and proactive, and you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01718 · 77.3th percentile
Published
2021-02-03T12:27Z
EPSS history
Timeline
  • 03 FEB 12:27Z
    PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges
    cvelistv5