Vulnerability in Codiad
CVE-2020-23355
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234 something can successfully authenticate.
EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Codiad — versions 2.8.4
- N/a — versions n/a
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-23355?
- CVE-2020-23355 is a high-severity vulnerability in Codiad. CVSS score: 7.5/10. Published 2021-01-27.
- How severe is CVE-2020-23355?
- High severity. CVSS v3 base score is 7.5 out of 10.