CVE-2020-25351: Medium severity rconfig vulnerability
Published Aug 20, 2021
·Updated
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read files on the system via a crafted request sent to to the /lib/crud/configcompare.crud.php script.
Affected Software
1 affected component
rConfig rConfig=3.9.5
Event History
Aug 20, 2021
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this information disclosure vulnerability?
The vulnerability ID for this information disclosure vulnerability is CVE-2020-25351.
2
What is the severity level of CVE-2020-25351?
The severity level of CVE-2020-25351 is medium with a severity value of 6.5.
3
Which version of rConfig is affected by CVE-2020-25351?
Version 3.9.5 of rConfig is affected by CVE-2020-25351.
4
How can remote authenticated attackers exploit CVE-2020-25351?
Remote authenticated attackers can exploit CVE-2020-25351 by sending a crafted request to the /lib/crud/configcompare.crud.php script.
5
Has CVE-2020-25351 been fixed?
Yes, CVE-2020-25351 has been fixed in version 3.9.6 of rConfig.