CVE-2020-9002

An issue was discovered in iPortalis iCS 7.1.13.0

Critical · published September 1, 2021

CVSS v3.0
9.6
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00996 · 62.4th percentile
Published
2021-09-01T10:45Z
EPSS history
Timeline
  • 01 SEP 10:45Z
    An issue was discovered in iPortalis iCS 7.1.13.0
    cvelistv5