← Back

Roc Partner Settlement

roc_partner_settlement

Vendor: Subex • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9384
1Subex
1Roc Partner Settlement
Jun 17, 2026
Apr 14, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST paramete...Show more
An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the applicationShow less