Lucene search
PRIOn knowledge basePRION:CVE-2020-8494HistoryJan 30, 2020 - 10:15 p.m.
Code injection
2020-01-3022:15:00
PRIOn knowledge base
www.prio-n.com
1
In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web_time_and_attendance | ge | 3.8 | |
| web_time_and_attendance | lt | 4.0 |
Related
cvelist
cvelist
CVE-2020-8494
2020-01-30 21:18:23
nvd
nvd
CVE-2020-8494
2020-01-30 22:15:10
cve
cve
CVE-2020-8494
2020-01-30 22:15:10
exploitpack
exploitpack
Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation
2020-02-05 00:00:00
packetstorm
packetstorm
Kronos WebTA 4.0 Privilege Escalation / Cross Site Scripting
2020-02-05 00:00:00
exploitdb
exploitdb
Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation
2020-02-05 00:00:00