PT-2020-14081 · Global Radar · Global Radar Bsa Radar

William Summerhill · Published 2020-06-22 · Updated 2022-05-03 · CVE-2020-14945

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Global RADAR BSA Radar versions 1.6.7234.24750 and earlier

Description A privilege escalation issue exists that allows an authenticated, low-privileged user to escalate their privileges to administrator rights, specifically the BankAdmin role, by modifying SaveUser data.

Recommendations For Global RADAR BSA Radar versions 1.6.7234.24750 and earlier, update to a version that contains a fix for this issue to prevent privilege escalation.

Exploit

Fix

Related Identifiers

CVE-2020-14945

Affected Products

Global Radar Bsa Radar

References · 5

• 🔥 https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14945%20-%20Privilege%20Escalation.md · Exploit
• 🔥 https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/48649 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14945 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14945 · Vendor Advisory