CVE-2020-14070

Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01

Description The issue concerns an authentication bypass in the web login functionality. This is due to guessable credentials for the admin access to the admin/executar login.php endpoint. The vulnerability is related to errors in handling registration data, which can allow a remote attacker to elevate their privileges.

Recommendations For MK-AUTH version 19.01, consider restricting access to the admin/executar login.php endpoint until a fix is available. As a temporary workaround, review and strengthen the credentials used for admin access to prevent guessable credentials from being exploited.