Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-9046

Kantech EntraPass Security Management Software - System Permissions Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior

  • unspecified to ≤ 8.22affected

Johnson Controls Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior

  • unspecified to ≤ 8.22affected

Johnson Controls Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior

  • unspecified to ≤ 8.22affected

References