CVE-2020-27157
High
Description
Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were provided to the server. An unauthenticated user could login to the application and gain access to the data and functionality accessible to the targeted user account.
SeverityHigh
CVSS8.1
Exploit probability—
ProductVeritas Aptare
PublishedOct 15, 2020
First seenOct 15, 2020
How to fix
Update
- veritas aptare10.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| veritas aptare | v < 10.5 | 10.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.