3 matches found
EUVD-2020-18250
Malware in sbrugna...
9.8CVSS9.2AI score0.0156EPSS
SaveExploits1References3
CVE-2020-25566
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the SavePassword form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64desired password...
9.8CVSS0.0156EPSS
SaveExploits1References2
Default credentials
In SapphireIMS 5.0, it is possible to take over an account by sending a request to the SavePassword form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64desired password...
7.5CVSS9.4AI score0.0156EPSS
SaveExploits1References2Affected Software1
20