1. Home
  2. CVE Database
  3. CVE-2020-27157
HIGH · 8.1

CVE-2020-27157

Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server. An unauthenticated user could login to ...

Vulnerability Description

Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server. An unauthenticated user could login to the application and gain access to the data and functionality accessible to the targeted user account.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
VeritasAptare< 10.5

Related Weaknesses (CWE)

CWE-294

References

FAQ

What is CVE-2020-27157?

CVE-2020-27157 is a vulnerability with a CVSS score of 8.1 (HIGH). Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server. An unauthenticated user could login to ...

How severe is CVE-2020-27157?

CVE-2020-27157 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-27157?

Check the references section above for vendor advisories and patch information. Affected products include: Veritas Aptare.