by Kastro
Paper/Archive/CVE-2020-9002

CVE-2020-9002

mitre — An issue was discovered in iPortalis iCS 7.1.13.0.

EPSS 1.0%CVSS 9.6
critical.is priorityof 100
41
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 62.7.627 × 2012.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)9.6CVSS:3.0/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N

References

refwebsec.nl/blogrefwebsec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021