CVE-2020-13474 - In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users

Back Back to CVE browser

MEDIUM

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users

Published Dec 28, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.76%

Description

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-425

References (3)

https://cvewalkthrough.com/cve-2020-13474-nch-express-accounts-privilege-escalation/
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-5725
Advisory
https://tejaspingulkar.blogspot.com/2020/12/cve-2020-13474-nch-express-accounts.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://cvewalkthrough.com/cve-2020-13474-nch-express-accounts-privilege-escalation/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-5725		Advisory
https://tejaspingulkar.blogspot.com/2020/12/cve-2020-13474-nch-express-accounts.html		x_refsource_MISCExploitThird Party Advisory