CVE-2020-16240: High severity ge digital apm classic vulnerability
GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JSON) format by users who should not have access to such functionality. An attacker can download sensitive data related to user accounts without having the proper privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-16240?
CVE-2020-16240 has a medium severity rating due to the potential exposure of sensitive user account data.
How do I fix CVE-2020-16240?
To fix CVE-2020-16240, it is recommended to upgrade to a later version of GE Digital APM Classic beyond version 4.4.
What type of vulnerability is CVE-2020-16240?
CVE-2020-16240 is classified as an insecure direct object reference (IDOR) vulnerability.
Who is affected by CVE-2020-16240?
Users of GE Digital APM Classic versions 4.4 and prior are affected by CVE-2020-16240.
What data can be compromised due to CVE-2020-16240?
CVE-2020-16240 can allow unauthorized users to download sensitive user account data in JSON format.