PT-2020-18525
CVE-2020-5550
·
Published
2020-04-08
·
Updated
2020-04-09
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
EasyBlocks IPv6 versions 2.0.1 and earlier
EasyBlocks Enterprise versions 2.0.1 and earlier
Description
The issue allows remote attackers to impersonate a registered user and log in to the management console, potentially resulting in information alteration or disclosure via unspecified vectors.
Recommendations
For EasyBlocks IPv6 versions 2.0.1 and earlier, update to a version later than 2.0.1 to resolve the issue.
For EasyBlocks Enterprise versions 2.0.1 and earlier, update to a version later than 2.0.1 to resolve the issue.
As a temporary workaround, consider restricting access to the management console to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾