CVE-2020-16240
CVE-2020-16240
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JSON) format by users who should not have access to such functionality. An attacker can download sensitive data related to user accounts without having the proper privileges.
Affected products
n/a · GE Digital APM ClassicWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →