CVEvulnerability

CVE-2020-5616

9.8 CRITICAL Published 2020-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors.

Affected configurations

• calendar01 project calendar01 1.0.0 • calendar02 project calendar02 1.0.0 • calendarform01 project calendarform01 (<= 1.0.3) • gallery01 project gallery01 (<= 1.0.3) • link01 project link01 1.0.0 • pkobo-news01 project pkobo-news01 (<= 1.0.3) • pkobo-vote01 project pkobo-vote01 (<= 1.0.1) • telop01 project telop01 1.0.0

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References