{"id":"CVE-2020-36948","state":"PUBLISHED","title":"VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation","description":"VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens. Attackers can exploit insufficient token validation to access user accounts and perform unauthorized login requests without proper administrative permissions.","publishedAt":"2026-01-27T15:23:50.046Z","updatedAt":"2026-03-05T01:27:04.698Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["VestaCP VestaCP"],"affected":[{"vendor":"VestaCP","product":"VestaCP","versions":[{"version":"0.9.8-26","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/49219","https://vestacp.com/","https://www.vulnerability-lab.com/get_content.php?id=2240","https://www.vulnerability-lab.com/show.php?user=Benjamin%20K.M.","https://www.vulncheck.com/advisories/vestacp-loginas-insufficient-session-validation"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T19:47:24.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/36xxx/CVE-2020-36948.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-36948","state":"PUBLISHED","datePublished":"2026-01-27T15:23:50.046Z","dateUpdated":"2026-03-05T01:27:04.698Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-25T13:50:01.143Z"},"containers":{"cna":{"title":"VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation","descriptions":[{"lang":"en","value":"VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens. Attackers can exploit insufficient token validation to access user accounts and perform unauthorized login requests without proper administrative permissions."}],"affected":[{"vendor":"VestaCP","product":"VestaCP","versions":[{"version":"0.9.8-26","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/49219","name":"ExploitDB-49219","tags":["exploit"]},{"url":"https://vestacp.com/","name":"VestaCP Official Homepage","tags":["product"]},{"url":"https://www.vulnerability-lab.com/get_content.php?id=2240","name":"Vulnerability Lab Advisory","tags":["technical-description","exploit"]},{"url":"https://www.vulnerability-lab.com/show.php?user=Benjamin%20K.M.","name":"Benjamin Kunz Mejri Profile","tags":["vendor-advisory"]},{"url":"https://www.vulncheck.com/advisories/vestacp-loginas-insufficient-session-validation","name":"VulnCheck Advisory: VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","lang":"en","description":"Incorrect Authorization","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-05T01:27:04.698Z"},"datePublic":"2020-11-26T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vestacp:vesta_control_panel:0.9.8-26:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","value":"Vulnerability-Lab","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.vulnerability-lab.com/show.php?user=Benjamin%20K.M.","tags":["exploit"]},{"url":"https://www.exploit-db.com/exploits/49219","tags":["exploit"]},{"url":"https://www.vulnerability-lab.com/get_content.php?id=2240","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-27T21:07:57.516937Z","id":"CVE-2020-36948","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-27T21:36:26.071Z"}}]}}}