CVE-2020-36948: VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation
VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens. Attackers can exploit insufficient token validation to access user accounts and perform unauthorized login requests without proper administrative permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36948?
CVE-2020-36948 is classified as a moderate severity vulnerability due to its potential to allow unauthorized access to user accounts.
How do I fix CVE-2020-36948?
To mitigate CVE-2020-36948, it is recommended to update VestaCP to the latest version that addresses session token validation.
What type of vulnerability is CVE-2020-36948?
CVE-2020-36948 is an insufficient session validation vulnerability found in the LoginAs module of VestaCP.
Can CVE-2020-36948 be exploited remotely?
Yes, CVE-2020-36948 can be exploited remotely, allowing attackers to potentially access user accounts.
Which software is affected by CVE-2020-36948?
CVE-2020-36948 affects VestaCP version 0.9.8-26.