CVE-2020-36126: High severity paxstore vulnerability
Pax Technology PAXSTORE v7.0.820200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation. PAXSTORE marketplace endpoints allow an authenticated user to read and write data not owned by them, including third-party users, application and payment terminals, where an attacker can impersonate any user which may lead to the unauthorized disclosure, modification, or destruction of information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36126?
CVE-2020-36126 is classified as a high-severity vulnerability due to its potential for remote privilege escalation.
How do I fix CVE-2020-36126?
To fix CVE-2020-36126, upgrade to a version of PaxStore that is higher than 7.0.8_20200511171508.
What are the potential impacts of CVE-2020-36126?
The impacts of CVE-2020-36126 include unauthorized data access and manipulation due to flawed access controls.
Who is affected by CVE-2020-36126?
CVE-2020-36126 affects users of Pax Technology's PaxStore software versions 7.0.8_20200511171508 and lower.
What kind of vulnerability is CVE-2020-36126?
CVE-2020-36126 is an access control vulnerability that allows an authenticated user to improperly read and write data that they do not own.