CVE-2020-25966

Sectona Spectra (before 3.4.0) exposes a vulnerable SOAP API endpoint that can disclose sensitive information about provisioned assets, including login credentials, without proper authentication by manipulating the pAccountID value. This has been reported across multiple sources (Red Hat, CNVD, C...