CVE-2020-2076

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, bypass current authentication controls presented by the application and could potentially write files without authentication.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-20777.5SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unautho CVE-2020-20786.5Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.1.1. An authorized at CVE-2020-207815.4A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web sc CVE-2020-207969.8FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.CVE-2020-207979.8FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.CVE-2020-207995.4JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via CVE-2020-208009.8An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&sho CVE-2020-208086.1Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd a CVE-2020-208137.5Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.CVE-2020-208918.8Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Serv CVE-2020-208928.8An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of S CVE-2020-208968.8An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Servic