CVE-2020-10130

EUVD-2020-2593
SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
searchbloxsearchblox
𝑥
< 9.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://developer.searchblox.com/v9.2/changelog/version-91
https://developer.searchblox.com/v9.2/changelog/version-91