CVE-2020-5539

2020-03-0207:00:24

jpcert

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.

CNA Affected

[
  {
    "product": "GRANDIT",
    "vendor": "GRANDIT CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0"
      }
    ]
  }
]