PT-2023-11550 · Unknown · Westbrookadmin Portfoliocms

Yuzezheng416 · Published 2023-01-31 · Updated 2025-03-27 · CVE-2020-20402

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Westbrookadmin portfolioCMS version 1.05

Description The issue allows attackers to bypass password validation and access sensitive information via session fixation.

Recommendations For Westbrookadmin portfolioCMS version 1.05, update to a version that fixes the session fixation issue to prevent attackers from bypassing password validation and accessing sensitive information.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-20402

Affected Products

Westbrookadmin Portfoliocms

References · 4

• 🔥 https://github.com/Westbrookadmin/portfolioCMS/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-20402 · Security Note
• https://osv.dev/vulnerability/CVE-2020-20402 · Vendor Advisory
• https://t.me/cvenotify/116594 · Telegram Post