Vulnerability Details : CVE-2020-36125
Potential exploit
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly.
Products affected by CVE-2020-36125
- cpe:2.3:a:paxtechnology:paxstore:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-36125
0.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 58 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-36125
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:N |
8.0
|
4.9
|
NIST | |
7.1
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N |
2.8
|
4.2
|
NIST |
CWE ids for CVE-2020-36125
-
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-36125
-
https://www.whatspos.com/
PAXSTOREProduct
-
https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/
Multiple security vulnerabilities affect PAXSTORE (PAX Technology) - PSADV2021-001Exploit;Third Party Advisory
-
https://marketing.paxtechnology.com/about-pax
About PAXProduct
Jump to