CVE-2020-12478

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Apr 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-124798.8TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sourceCVE-2020-12488.8A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka CVE-2020-124806.5In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameCVE-2020-124836.1The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully cCVE-2020-124846.4When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprisCVE-2020-124855.5The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the bouCVE-2020-124877.0Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execCVE-2020-124885.5The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands withoCVE-2020-12497.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationCVE-2020-124914.8Improper control of framework service permissions with possibility of some sensitive device information leakage.CVE-2020-124921.0Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information.CVE-2020-1249310.0An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without acce
CVE-2020-12478: High severity, CVSS 7.5 | Vulnix