Authorization Bypass in Veritas APTARE Product
CVE-2020-12875

6.3MEDIUM

Key Information:

Vendor

Veritas

Status
Aptare
Vendor
CVE Published:
14 May 2020

What is CVE-2020-12875?

The Veritas APTARE product versions prior to 10.4 are susceptible to an authorization bypass vulnerability due to insufficient authorization checks. An authenticated user can exploit this weakness by manipulating specific parameters, which may lead to unauthorized access to sensitive information or functionalities within the application. This flaw can undermine the integrity of security controls and expose confidential data, necessitating immediate attention for all users of the affected versions.

References

https://www.veritas.com/content/support/en_US/security/VT...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.