CVE-2020-9384

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users…

published April 14, 2020

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the application

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01902 · 79.5th percentile
Published
2020-04-14T19:52Z
EPSS history
Timeline
  • 14 APR 19:52Z
    An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users…
    cvelistv5