5.3
CVE-2020-19003
- EPSS 0.21%
- Veröffentlicht 06.10.2021 13:15:07
- Zuletzt bearbeitet 21.11.2024 05:08:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Liftoffsoftware ≫ Gate One Version1.2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.439 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
CWE-290 Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.