VulnerabilityModified
CVE-2020-23139
Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise.
MEDIUM 5.5EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
Microweber 1.1.18 is affected by broken authentication and session management. Local session hijacking may occur, which could result in unauthorized access to system data or functionality, or a complete system compromise.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- microweber/microweber
- Source
- cve@mitre.org
References
- https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6Third Party Advisory
- https://gist.github.com/virendratiwari03/9fdebe4d0b379d1996238b535add56d6Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.