CVE-2019-14480 - AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges

Back Back to CVE browser

CRITICAL

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges

Published Dec 16, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.13%

Description

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (5)

CWE-200

Exposure of Sensitive Information

CWE-311

Missing Encryption of Sensitive Data

CWE-338

CWE-522

Insufficiently Protected Credentials

CWE-732

Incorrect Permission Assignment

References (3)

https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt
x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5665
Advisory
https://www.adremsoft.com/support/
x_refsource_MISCProduct

Link	Providers	Tags
https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt		x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5665		Advisory
https://www.adremsoft.com/support/		x_refsource_MISCProduct