critical9.8
CVE-2020-25563
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Auto…
Impact
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sapphireims | Sapphireims | Version 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://vuln.shellcoder.party/2020/09/19/cve-2020-25563-sapphireims-unauthenticated-remote-command-execution-create-local-admin-on-clients/
- https://vuln.shellcoder.party/tags/sapphireims/
- https://vuln.shellcoder.party/2020/09/19/cve-2020-25563-sapphireims-unauthenticated-remote-command-execution-create-local-admin-on-clients/
- https://vuln.shellcoder.party/tags/sapphireims/