CVE-2020-13638

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

CVE-2020-13638

creationtimestamp| type| source ---|---|--- 2020-11-13 22:33:58+00:00| seen| https://t.me/cibsecurity/16323 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-13638

CVE-2020-13638 affects the rConfig product (3.9.x) where lib/crud/userprocess.php contains an authentication bypass that can lead to administrator account creation. The issue is explicitly described as bypassing authentication and enabling admin account creation, with a fixed release in 3.9.7 (up...