Vulnerability Details CVE-2020-9002
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.0%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 6.0
References
Products affected by CVE-2020-9002
-
cpe:2.3:a:iportalis:iportalis_control_portal:7.1.13.0