CVE-2020-25846

The CVE-2020-25846 entry concerns NHIServiSignAdapter. The digest generation function has not been verified for the source file path, allowing an SMB request to be redirected to a malicious host and potentially leaking the user’s credentials. Documents provide CVSS data from NVD (base score 7.4–7...

CVE-2020-25846 CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential...