CVE-2020-9046
26.05.2020, 21:15
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.Enginsight
| Vendor | Product | Version |
|---|---|---|
| johnsoncontrols | kantech_entrapass | 𝑥 ≤ 8.22 |
| johnsoncontrols | kantech_entrapass | 𝑥 ≤ 8.22 |
| johnsoncontrols | kantech_entrapass | 𝑥 ≤ 8.22 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.