critical9.8
CVE-2019-14480
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalatio…
Impact
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adremsoft | Netcrunch | through 11.0.0.5282 |
Weakness classification
References
- NVD record
- CVE.org record
- https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt
- https://www.adremsoft.com/support/
- https://compass-security.com/fileadmin/Research/Advisories/2020-14_CSNC-2019-015_AdRem_NetCrunch_Improper_Session_Handling.txt
- https://www.adremsoft.com/support/