CVE-2020-27156

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Veritas APTARE versions prior to 10.5 did not perform adequate authorization checks. This vulnerability could allow for remote code execution by an unauthenticated user.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Oct 15, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-271578.1Veritas APTARE versions prior to 10.5 included code that bypassed the normal login process when specific authentication credentials were proCVE-2020-271589.8Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices pCVE-2020-271599.8Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input inCVE-2020-27166.5Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versionCVE-2020-271609.8Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devCVE-2020-271636.1phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.CVE-2020-27175.4Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versionCVE-2020-271704.7An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer aCVE-2020-271716.0An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflowCVE-2020-271729.8An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achiCVE-2020-271737.5In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standardCVE-2020-271747.5In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when da
CVE-2020-27156: Critical severity, CVSS 9.8 | Vulnix