4
CVSSv2

CVE-2020-12528

Published: 02/03/2021 Updated: 09/03/2021
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 7.7 | Impact Score: 4 | Exploitability Score: 3.1
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

An issue exists in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mbconnectline mbconnect24

mbconnectline mymbconnect24