CVE-2020-24981

EUVD-2020-17681
An Incorrect Access Control vulnerability exists in /ucms/chk.php in UCMS 1.4.8. This results in information leak via an error message caused by directly accessing the website built by UCMS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
Affected Products (NVD)
VendorProductVersion
ucms_projectucms
1.4.8
𝑥
= Vulnerable software versions
References
https://sunian.top/2020/08/26/ucms-Incorrect%20Access%20Control/
https://sunian.top/2020/08/26/ucms-Incorrect%20Access%20Control/