CVE-2020-13963 | BDVDB-2026-150704 Detail

Description#

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp (which is a guest account).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://forum.soplanning.org/viewforum.php?f=8
https://labs.integrity.pt/advisories/cve-2020-13963/
https://cwe.mitre.org/data/definitions/321.html

Exploit#

No public exploit known

History#

Version 12021-03-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.