PT-2022-8979 · Unknown · Platinum Mobile

M. Li · Published 2022-06-03 · Updated 2022-06-14 · CVE-2020-36528

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Platinum Mobile version 1.0.4.850

Description A critical issue was found, affecting the "/MobileHandler.ashx" API endpoint, which leads to broken access control. The attack requires authentication.

Recommendations For Platinum Mobile version 1.0.4.850, upgrade to version 1.0.4.851 to address this issue. It is recommended to upgrade the affected component.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-264

Related Identifiers

CVE-2020-36528

Affected Products

Platinum Mobile

References · 4

• 🔥 http://seclists.org/fulldisclosure/2020/Oct/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36528 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36528 · Vendor Advisory
• https://vuldb.com/?id.162264 · Note