CVE-2020-20466

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

White Shark System (WSS) 1.3.2 is vulnerable to unauthorized access via user_edit_password.php, remote attackers can modify the password of any user.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-204676.5White Shark System (WSS) 1.3.2 is vulnerable to sensitive information disclosure via default_task_add.php, remote attackers can exploit the CVE-2020-204686.5White Shark System (WSS) 1.3.2 is vulnerable to CSRF. Attackers can use the user_edit_password.php file to modify the user password.CVE-2020-204697.5White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the log_edit.php files failing to filter the CVE-2020-204705.3White Shark System (WSS) 1.3.2 has web site physical path leakage vulnerability.CVE-2020-204718.8White Shark System (WSS) 1.3.2 has an unauthorized access vulnerability in default_user_edit.php, remote attackers can exploit this vulnerabCVE-2020-204725.3White Shark System (WSS) 1.3.2 has a sensitive information disclosure vulnerability. The if_get_addbook.php file does not have an authenticaCVE-2020-204737.5White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the control_task.php, control_project.php, deCVE-2020-204747.5White Shark System (WSS) 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the default_task_edituser.php files failing tCVE-2020-20483.3An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS applianCVE-2020-204867.5IEC104 v1.0 contains a stack-buffer overflow in the parameter Iec10x_Sta_Addr.CVE-2020-20497.8A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticateCVE-2020-204907.5A heap buffer-overflow in the client_example1.c component of libiec_iccp_mod v1.5 leads to a denial of service (DOS).
CVE-2020-20466: Critical severity, CVSS 9.8 | Vulnix