PT-2022-8979

CVE-2020-36528

·

Published

2022-06-03

·

Updated

2022-06-14

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Platinum Mobile version 1.0.4.850
Description A critical issue was found, affecting the "/MobileHandler.ashx" API endpoint, which leads to broken access control. The attack requires authentication.
Recommendations For Platinum Mobile version 1.0.4.850, upgrade to version 1.0.4.851 to address this issue. It is recommended to upgrade the affected component.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
CWE-264
Related identifiers
CVE-2020-36528
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com