Lucene search
MitreCVELIST:CVE-2020-26178HistoryDec 18, 2020 - 9:26 a.m.
CVE-2020-26178
2020-12-1809:26:16
mitre
www.cve.org
4
tangro business workflow
insecure attachment download
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
49.9%
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
Related
nvd
nvd
CVE-2020-26178
2020-12-18 10:15:13
cve
cve
CVE-2020-26178
2020-12-18 10:15:13
prion
prion
Code injection
2020-12-18 10:15:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
49.9%
Related for CVELIST:CVE-2020-26178