CVE-2020-16260 | BDVDB-2026-143913 Detail

Description#

Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://winstonprivacy.com/
https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4

Exploit#

No public exploit known

History#

Version 12020-10-28Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.