CVE-2020-25917

CVE-2020-25917 affects Stratodesk NoTouch Center before 4.4.68. The root cause is Incorrect Access Control allowing a low-privileged user (e.g., a user with “helpdesk” privileges) to perform privileged operations, such as adding a new administrator via easyadmin/user/submitCreateTCUser.do . CVSS ...