CVE-2020-20472

Name of the Vulnerable Software and Affected Versions White Shark System (WSS) version 1.3.2

Description The issue is related to a sensitive information disclosure. The if get addbook.php file lacks an authentication operation, allowing remote attackers to obtain username information for all users of the current site. This can lead to unauthorized access to protected information.

Recommendations For White Shark System (WSS) version 1.3.2, consider implementing authentication for the if get addbook.php file to prevent unauthorized access. As a temporary workaround, restrict access to the if get addbook.php file until a proper authentication mechanism is in place.