CVEvulnerability

CVE-2020-5539

6.5 MEDIUM Published 2020-03-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-639

Description

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.

Affected configurations

• grandit grandit 1.6 • grandit grandit 2.0 • grandit grandit 2.1 • grandit grandit 2.2 • grandit grandit 2.3 • grandit grandit 3.0

Related

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References