CVE-2020-25917

Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the platform via the easyadmin/user/submitCreateTCUser....

CVE-2020-25917

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:35+00:00| seen| MISP/ee5ab47e-3da0-4a3e-8019-282137cd8c90...

CVE-2020-25917

CVE-2020-25917 affects Stratodesk NoTouch Center before 4.4.68. The root cause is Incorrect Access Control allowing a low-privileged user (e.g., a user with “helpdesk” privileges) to perform privileged operations, such as adding a new administrator via easyadmin/user/submitCreateTCUser.do . CVSS ...

Stratodesk NoTouch Center Privilege Escalation

Stratodesk NoTouch Center Virtual Appliance is a portal for managing NoTouch clients. It appears that Stratodesk has a partnership with ViewSonic and produced these appliances to support some of their hardware devices as well. - https://www.stratodesk.com/products/notouch-desktop/virtual-applianc...