Security Advisory

CVE-2020-9002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-01 10:45:57
Last updated 2024-08-04 10:19:19
Assigner mitre
CVSS score 9.6
State PUBLISHED

Description

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).