CVE-2020-15698

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-156995.3An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site confCVE-2020-15707.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerCVE-2020-157006.3An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer causes a CSRF vulneraCVE-2020-157015.5An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtimCVE-2020-157027.0TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exiCVE-2020-157033.3There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directoCVE-2020-157045.5The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-rooCVE-2020-157056.4GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems wCVE-2020-157066.4GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefinCVE-2020-157076.4Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in DeCVE-2020-157087.8Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to oveCVE-2020-157095.5Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package arch
CVE-2020-15698: Medium severity, CVSS 5.3 | Vulnix