ID:2788 - Exploit for Improper access control in vBulletin - CVE-2020-12720

 
Main Vulnerability Database Exploits ID:2788 - Exploit for Improper access control in vBulletin - CVE-2020-12720

ID:2788 - Exploit for Improper access control in vBulletin - CVE-2020-12720

Published: June 2, 2020


Vulnerability identifier: #VU27705
Vulnerability risk: Medium
CVE-ID: CVE-2020-12720
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
vBulletin

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain unauthorized access to sensitive information.

The vulnerability exists due to improper access restrictions. A remote attacker can send a specially crafted request and gain unauthorized access to the affected application.


Remediation

Install update from vendor's website.