Auth bypass in Pydio Cells
CVE-2020-12848
In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shared user account is created in the backend with a random username. An anonymous user that obtains a valid public link can get the associated hidden account username and password and proceed to login to the web application. Once logged into the web application with the hidden user account, some actions that were not available with the public share link can now be performed.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.011 (64.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 64.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Pydio Cells — versions 2.0.4
Weakness classification (CWE)
References
- www.coresecurity.com/advisories (Third Party Advisory)
- www.coresecurity.com/core-labs/advisories/pydio-cells-204-multiple-vulnerabilit… (Exploit, Third Party Advisory)
- packetstormsecurity.com/files/158002/Pydio-Cells-2.0.4-XSS-File-Write-Code-Exec… (Third Party Advisory)
Frequently asked questions
- What is CVE-2020-12848?
- CVE-2020-12848 is a medium-severity vulnerability in Pydio Cells, classified under Improper Authentication. CVSS score: 5.4/10. Published 2020-06-05.
- How severe is CVE-2020-12848?
- Medium severity. CVSS v3 base score is 5.4 out of 10.