CVE-2020-10510

CWE-863 — Incorrect Authorization CWE-20 — Improper Input Validation3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.2%

top 55.58%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sunnet Ehrd SUN Ehrd

Timeline

PublishedMar 27

Latest updateMay 24

Description

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5sunnet/ehrd8, 9+1

▶NVDsun/ehrd8, 9+1

🔴Vulnerability Details

GHSA

GHSA-xjmv-q8w5-38gf: Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control↗2022-05-24

▶

CVEList

Sunnet eHRD - Broken Access Control↗2020-03-27

▶