CVE-2020-36125

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
paxtechnologypaxstore
𝑥
≤ 7.0.8_20200511171508
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/
https://marketing.paxtechnology.com/about-pax
https://www.whatspos.com/
https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/
https://marketing.paxtechnology.com/about-pax
https://www.whatspos.com/