CVE-2020-14945 - A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data

Back Back to CVE browser

HIGH

A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data

Published Jun 22, 2020

8.8

HIGH

CVSS 3.1

EPSS 11.40%

Description

A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7080
Advisory
https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities
x_refsource_MISCThird Party Advisory
https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14945%20-%20Privilege%20Escalation.md
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/48649
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7080		Advisory
https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities		x_refsource_MISCThird Party Advisory
https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14945%20-%20Privilege%20Escalation.md		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/48649		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 22, 2020

Updated Aug 4, 2024

Reserved Jun 21, 2020

Link CVE-2020-14945

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14945

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 22, 2020

Updated Aug 4, 2024

Link EUVD-2020-7080

GitHub

No data