CVEvulnerability
CVE-2020-21990
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-04-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-863
Description
Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.
Affected configurations
• domoticz mydomoathome 0.240
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://www.exploit-db.com/exploits/47824 Exploit, Third Party Advisory, VDB Entry
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/47824 Exploit, Third Party Advisory, VDB Entry
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php Exploit, Third Party Advisory