PT-2023-11550 · Unknown · Westbrookadmin Portfoliocms

Yuzezheng416 · Publicado 2023-01-31 · Atualizado 2025-03-27 · CVE-2020-20402

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Westbrookadmin portfolioCMS version 1.05

Description The issue allows attackers to bypass password validation and access sensitive information via session fixation.

Recommendations For Westbrookadmin portfolioCMS version 1.05, update to a version that fixes the session fixation issue to prevent attackers from bypassing password validation and accessing sensitive information.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2020-20402

Produtos afetados

Westbrookadmin Portfoliocms

Referências · 4

• 🔥 https://github.com/Westbrookadmin/portfolioCMS/issues/2 · Exploit
• https://t.me/cvenotify/116594 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-20402 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2020-20402 · Aviso do Fabricante