CVE-2020-14944

Published June 22nd, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.

wsummerhill/BSA-Radar_CVE-Vulnerabilities

CVE submissions for the Global Radar - BSA Radar banking application

GitHub