Lucene search
+L

4 matches found

Mend
Mend
•added 2020/11/13 7:53 p.m.•4 views

CVE-2020-13638

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

9.8CVSS0.76601EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/11/13 7:53 p.m.•40 views

CVE-2020-13638

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

9.6AI score0.76601EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/11/13 12:00 a.m.•3 views

PT-2020-13629

Name of the Vulnerable Software and Affected Versions rConfig versions 3.9.x through 3.9.6 Description The issue is related to an authentication bypass in the lib/crud/userprocess.php file, which can lead to the creation of administrator accounts. Recommendations For versions 3.9.x through 3.9.6,...

9.8CVSS0.76601EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/13 12:00 a.m.•8 views

CVE-2020-13638: Improper Privilege Management

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

9.8CVSS5.7AI score0.76601EPSS
SaveExploits1References2
Rows per page
Query Builder