CVE-2020-35296: High severity thinkadmin vulnerability

Published Mar 3, 2021

Updated

ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access.

Affected Software

3 affected components

composer/zoujingli/thinkadmin=6.0

ThinkAdmin ThinkAdmin=6.0

Ctolog Thinkadmin=6.0

Event History

Mar 3, 2021

CVE Published

via MITRE·03:04 PM

Data Sourced

via MITRE·03:04 PM

Description

May 24, 2022

Advisory Published

via GitHub·05:43 PM

Frequently Asked Questions

What is CVE-2020-35296?

CVE-2020-35296 is a vulnerability in ThinkAdmin v6 that allows attackers to gain unrestricted administrative dashboard access due to default administrator credentials.

What is the severity of CVE-2020-35296?

The severity of CVE-2020-35296 is high with a severity value of 7.5.

How can attackers exploit CVE-2020-35296?

Attackers can exploit CVE-2020-35296 by using the default administrator credentials to gain unrestricted access to the administrative dashboard.

Is there a fix available for CVE-2020-35296?

Yes, it is recommended to change the default administrator credentials in ThinkAdmin v6 to mitigate CVE-2020-35296.

Where can I find more information about CVE-2020-35296?

You can find more information about CVE-2020-35296 on the following references: [Reference 1](https://github.com/Shrimant12/CVE-References/blob/main/CVE-2020-35296.md), [Reference 2](https://github.com/zoujingli/ThinkAdmin), [Reference 3](https://smshrimant.com/admin-panel-access-using-default-credentials/).