by Kastro
Paper/Archive/CVE-2020-36948

CVE-2020-36948

VestaCP VestaCP — VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation

EPSS 0.6%public exploitCVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.2.502 × 2010.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens. Attackers can exploit insufficient token validation to access user accounts and perform unauthorized login requests without proper administrative permissions.

Affected

ProductAffectedFixed inSource
VestaCP0.9.8-26–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitexploit-db.com/exploits/49219refvestacp.comexploitvulnerability-lab.com/get_content.php?id=2240exploitvulnerability-lab.com/show.php?user=Benjamin%20K.M.writeupvulncheck.com/advisories/vestacp-loginas-insufficient-session-validation