PT-2020-20658
CVE-2020-9437
·
Published
2020-06-25
·
Updated
2020-07-06
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SecureAuth IdP version 9.3.0
Description
The issue is related to a client-side template injection in SecureAuth.aspx, which allows for script execution similar to XSS. This enables potential attackers to execute scripts on the client-side.
Recommendations
For SecureAuth IdP version 9.3.0, consider disabling the affected SecureAuth.aspx page until a patch is available to prevent script execution. Restrict access to this page to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾