CVE-2020-36125

Pax Technology PAXSTORE v7.0.820200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly...

CVE-2020-36125

Pax Technology PAXSTORE v7.0.8_20200511171508 and earlier are affected by an access-control vulnerability that lets an authenticated attacker bypass password re-verification in sensitive operations by directly requesting the endpoint. Root cause: improper access control in PaxSTORE; impact: remot...