CVE-2020-5539: Medium severity GRANDIT GRANDIT vulnerability
Published Mar 2, 2020
·Updated
GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.
Affected Software
6 affected components
GRANDIT GRANDIT=1.6
GRANDIT GRANDIT=2.0
GRANDIT GRANDIT=2.1
GRANDIT GRANDIT=2.2
GRANDIT GRANDIT=2.3
GRANDIT GRANDIT=3.0
Event History
Mar 2, 2020
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-5539?
CVE-2020-5539 has a medium severity rating of 6.5 on the CVSS scale.
2
How do I fix CVE-2020-5539?
To fix CVE-2020-5539, ensure that you update GRANDIT to the latest version where session management vulnerabilities are addressed.
3
What vulnerabilities are associated with CVE-2020-5539?
CVE-2020-5539 allows remote attackers to impersonate users and manipulate sensitive information due to improper session management.
4
Which versions of GRANDIT are affected by CVE-2020-5539?
GRANDIT versions 1.6, 2.0, 2.1, 2.2, 2.3, and 3.0 are affected by CVE-2020-5539.
5
How can attackers exploit CVE-2020-5539?
Attackers can exploit CVE-2020-5539 by impersonating an arbitrary user due to inadequate session management.