medium6.1
CVE-2020-24551
IProom MMC+ Server login page does not validate specific parameters properly.
Impact
IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iproom | Mmc\+ | Version 3.2.2 |