CVE-2020-25564

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5.0

Description: The issue allows an attacker to create a local administrator on any client using the credentials of a non-privileged user. This is achieved by directly accessing the RemoteMgmtTaskSave feature, which is part of the Automation Tasks.

Recommendations: For SapphireIMS version 5.0, consider disabling direct access to the RemoteMgmtTaskSave feature until a patch is available. Restrict the use of Automation Tasks to minimize the risk of exploitation.