| ID |
CVE-2020-14944
|
| Summary |
Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 7.5 (as of 03-05-2022 - 13:59) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-862 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
| refmap
via4
|
|
| Last major update |
03-05-2022 - 13:59 |
| Published |
22-06-2020 - 22:15 |
| Last modified |
03-05-2022 - 13:59 |
