API Vulnerability in Zyxel CloudCNM SecuManager
CVE-2020-15346
5.3MEDIUM
What is CVE-2020-15346?
Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1 contain a vulnerability within the /live/GLOBALS API that exposes sensitive information due to improper access controls. This issue arises from the use of the CLOUDCNM key, which, if exploited, could allow unauthorized access to critical API functionalities. Users of affected versions are advised to seek updates and implement security measures to mitigate potential risks as detailed in Zyxel's security advisory.