Security Advisory

CVE-2020-25846

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-31 07:45:48

Last updated 2024-09-17 01:41:45

Assigner twcert

CVSS score 7.5

State PUBLISHED

Description

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

← Browse all CVEs View on cve.org ↗