CVEvulnerability

CVE-2020-26506

4.3 MEDIUM Published 2020-11-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-670, CWE-863

Description

An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.

Affected configurations

• marmind marmind 4.1.141.0

Related

Weakness · CWE (2)

  • CWE-670 Always-Incorrect Control Flow Implementation weakness
  • CWE-863 Incorrect Authorization weakness

References