CVE-2020-35775

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

CITSmart before 9.1.2.23 allows LDAP Injection.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/162181/CITSmart-ITSM-9.1.2.22-LDAP-Injection.htmlThird Party Advisory, VDB Entry
https://citsmart.com.br/solucoes/itsm-2/Product, Vendor Advisory
https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.htmlRelease Notes, Vendor Advisory
https://github.com/nardnet/citsmart/blob/master/WEB-INF/src/br/com/centralit/citcorpore/integracao/ad/LDAPUtils.javaThird Party Advisory
https://rdstation-static.s3.amazonaws.com/cms/files/86153/1597862259Ebook-Whatsnew-CITSmart.pdfProduct
http://packetstormsecurity.com/files/162181/CITSmart-ITSM-9.1.2.22-LDAP-Injection.htmlThird Party Advisory, VDB Entry
https://citsmart.com.br/solucoes/itsm-2/Product, Vendor Advisory
https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.htmlRelease Notes, Vendor Advisory
https://github.com/nardnet/citsmart/blob/master/WEB-INF/src/br/com/centralit/citcorpore/integracao/ad/LDAPUtils.javaThird Party Advisory
https://rdstation-static.s3.amazonaws.com/cms/files/86153/1597862259Ebook-Whatsnew-CITSmart.pdfProduct

Timeline

Published: Feb 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-357766.5A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash CVE-2020-357778.4NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.CVE-2020-357788.8Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.CVE-2020-357798.6NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-35786.5A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) S CVE-2020-357806.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357816.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357828.1Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 befor CVE-2020-357836.5Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before CVE-2020-357847.2Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before CVE-2020-357858.8NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365).CVE-2020-357864.5NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user.