Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-25842

CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CHANGING Inc. NHIServiSignAdapter

  • 1.0.20.0218affected

References