CVE-2020-9046 Kantech EntraPass Security Management Software - System Permissions Vulnerability

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files...

CVE-2020-9046

CVE-2020-9046 affects all versions of Johnson Controls Kantech EntraPass Editions. The vulnerability ( Improper Access Control CWE-284 ) could allow an authorized, low-privileged user to achieve full system-level privileges by replacing critical files with crafted ones. Affected editions include ...