PT-2020-14730 · Immuta · Immuta

Chris Davis · Published 2020-11-05 · Updated 2021-07-21 · CVE-2020-15949

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Immuta version 2.8.2

Description The issue is related to insecure permissions, which can lead to user account takeover.

Recommendations For Immuta version 2.8.2, update to a version that addresses the insecure permissions issue to prevent user account takeover.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-15949

Affected Products

Immuta

References · 6

• 🔥 https://labs.bishopfox.com/advisories · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15949 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15949 · Vendor Advisory
• https://labs.bishopfox.com/advisories/immuta-version-2.8.2 · Note
• https://t.me/cibsecurity/15864 · Telegram Post
• https://immuta.com · Note