CVE-2020-36125 | BDVDB-2026-153293 Detail

Description#

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://marketing.paxtechnology.com/about-pax
https://www.whatspos.com/
https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/

Exploit#

No public exploit known

History#

Version 12021-05-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.