← Back

CVE-2020-5616

nvd nist
Published: Aug 4, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors.

Affected (8)

Show all products
Calendar01 Project: Calendar01 · Calendar02 Project: Calendar02 · Calendarform01 Project: Calendarform01 · Gallery01 Project: Gallery01 · Link01 Project: Link01 · Pkobo News01 Project: Pkobo News01 · Pkobo Vote01 Project: Pkobo Vote01 · Telop01 Project: Telop01
Calendar01 Project
1 product
Calendar01
Calendar02 Project
1 product
Calendar02
Calendarform01 Project
1 product
Calendarform01
Gallery01 Project
1 product
Gallery01
Link01 Project
1 product
Link01
Pkobo News01 Project
1 product
Pkobo News01
Pkobo Vote01 Project
1 product
Pkobo Vote01
Telop01 Project
1 product
Telop01
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Calendar01
Version 1.0.0
Calendar02
Version 1.0.0
Calendarform01
Up to 1.0.3
Gallery01
Up to 1.0.3
Link01
Version 1.0.0
Pkobo News01
Up to 1.0.3
Pkobo Vote01
Up to 1.0.1
Telop01
Version 1.0.0

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (18)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: vultures@jpcert.or.jp
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory

Timeline

No history available yet.