deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-1996
Published: 2020-05-13
Description: A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulnerability can be leveraged to obfuscate an ongoing attack or fabricate log entries in the ms.log file This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.9.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://security.paloaltonetworks.com/CVE-2020-1996; https://security.paloaltonetworks.com/CVE-2020-1996
CVE: CVE-2020-1997
Published: 2020-05-13
Description: An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. If the user then successfully authenticates it will cause them to access an unexpected and potentially malicious website. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.0 versions earlier than 8.0.14.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://security.paloaltonetworks.com/CVE-2020-1997; https://security.paloaltonetworks.com/CVE-2020-1997
CVE: CVE-2020-1998
Published: 2020-05-13
Description: An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource access for the user. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; PAN-OS 9.1 versions earlier than 9.1.1; All versions of PAN-OS 8.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://security.paloaltonetworks.com/CVE-2020-1998; https://security.paloaltonetworks.com/CVE-2020-1998
CVE: CVE-2020-2001
Published: 2020-05-13
Description: An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenticated user with network access to PAN-OS management interface to write attacker supplied file on the system and elevate privileges. This issue affects: All PAN-OS 7.1 Panorama and 8.0 Panorama versions; PAN-OS 8.1 versions earlier than 8.1.12 on Panorama; PAN-OS 9.0 versions earlier than 9.0.6 on Panorama.
CVSS Score: 8.1 (HIGH)
CWE: CWE-123, CWE-787
References: https://security.paloaltonetworks.com/CVE-2020-2001; https://security.paloaltonetworks.com/CVE-2020-2001
CVE: CVE-2020-2002
Published: 2020-05-13
Description: An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS by failing to verify the integrity of the Kerberos key distribution center (KDC) before authenticating users. This affects all forms of authentication that use a Kerberos authentication profile. A man-in-the-middle type of attacker with the ability to intercept communication between PAN-OS and KDC can login to PAN-OS as an administrator. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; All version of PAN-OS 8.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-290, CWE-290
References: https://security.paloaltonetworks.com/CVE-2020-2002; https://security.paloaltonetworks.com/CVE-2020-2002
CVE: CVE-2020-2003
Published: 2020-05-13
Description: An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions before 8.1.14; PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://security.paloaltonetworks.com/CVE-2020-2003; https://security.paloaltonetworks.com/CVE-2020-2003
CVE: CVE-2020-2004
Published: 2020-05-13
Description: Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app (also known as GlobalProtect Agent) for MacOS and Windows. For this issue to occur all of these conditions must be true: (1) 'Save User Credential' option should be set to 'Yes' in the GlobalProtect Portal's Agent configuration, (2) the GlobalProtect user manually selects a gateway, (3) and the logging level is set to 'Dump' while collecting troubleshooting logs. This issue does not affect GlobalProtect app on other platforms (for example iOS/Android/Linux). This issue affects GlobalProtect app 5.0 versions earlier than 5.0.9, GlobalProtect app 5.1 versions earlier than 5.1.2 on Windows or MacOS. Since becoming aware of the issue, Palo Alto Networks has safely deleted all the known GlobalProtectLogs zip files sent by customers with the credentials. We now filter and remove these credentials from all files sent to Customer Support. The GlobalProtectLogs zip files uploaded to Palo Alto Networks systems were only accessible by authorized personnel with valid Palo Alto Networks credentials. We do not have any evidence of malicious access or use of these credentials.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-534, CWE-532
References: https://security.paloaltonetworks.com/CVE-2020-2004; https://security.paloaltonetworks.com/CVE-2020-2004
CVE: CVE-2020-2005
Published: 2020-05-13
Description: A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN that can compromise the user's active session. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7; All versions of PAN-OS 8.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://security.paloaltonetworks.com/CVE-2020-2005; https://security.paloaltonetworks.com/CVE-2020-2005
CVE: CVE-2020-2006
Published: 2020-05-13
Description: A stack-based buffer overflow vulnerability in the management server component of PAN-OS that allows an authenticated user to potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://security.paloaltonetworks.com/CVE-2020-2006; https://security.paloaltonetworks.com/CVE-2020-2006
CVE: CVE-2020-2007
Published: 2020-05-13
Description: An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges. This issue affects: All PAN-OS 7.1 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-2007; https://security.paloaltonetworks.com/CVE-2020-2007
CVE: CVE-2020-2008
Published: 2020-05-13
Description: An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system files and impact the system's integrity or cause a denial of service condition. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73, CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-2008; https://security.paloaltonetworks.com/CVE-2020-2008
CVE: CVE-2020-2009
Published: 2020-05-13
Description: An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in arbitrary code execution with root permissions. This issue affects: All versions of PAN-OS 7.1; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-73, CWE-610
References: https://security.paloaltonetworks.com/CVE-2020-2009; https://security.paloaltonetworks.com/CVE-2020-2009
CVE: CVE-2020-2010
Published: 2020-05-13
Description: An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute arbitrary OS commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-2010; https://security.paloaltonetworks.com/CVE-2020-2010
CVE: CVE-2020-2011
Published: 2020-05-13
Description: An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for a remote unauthenticated user to send a specifically crafted registration request to the device that causes the configuration service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS Panorama services by restarting the device and putting it into maintenance mode. This issue affects: All versions of PAN-OS 7.1, PAN-OS 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7; PAN-OS 9.1 versions earlier than 9.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.paloaltonetworks.com/CVE-2020-2011; https://security.paloaltonetworks.com/CVE-2020-2011
CVE: CVE-2020-2012
Published: 2020-05-13
Description: Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network access to the Panorama management interface to read arbitrary files on the system. This issue affects: All versions of PAN-OS for Panorama 7.1 and 8.0; PAN-OS for Panorama 8.1 versions earlier than 8.1.13; PAN-OS for Panorama 9.0 versions earlier than 9.0.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://security.paloaltonetworks.com/CVE-2020-2012; https://security.paloaltonetworks.com/CVE-2020-2012
CVE: CVE-2020-2013
Published: 2020-05-13
Description: A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama version, their PAN-OS session cookie is transmitted over cleartext to the firewall. An attacker with the ability to intercept this network traffic between the firewall and Panorama can access the administrator's account and further manipulate devices managed by Panorama. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; PAN-OS 9.1 versions earlier than 9.1.1; All version of PAN-OS 8.0;
CVSS Score: 8.3 (HIGH)
CWE: CWE-319, CWE-319
References: https://security.paloaltonetworks.com/CVE-2020-2013; https://security.paloaltonetworks.com/CVE-2020-2013
CVE: CVE-2020-2014
Published: 2020-05-13
Description: An OS Command Injection vulnerability in PAN-OS management server allows authenticated users to inject and execute arbitrary shell commands with root privileges. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-2014; https://security.paloaltonetworks.com/CVE-2020-2014
CVE: CVE-2020-2015
Published: 2020-05-13
Description: A buffer overflow vulnerability in the PAN-OS management server allows authenticated users to crash system processes or potentially execute arbitrary code with root privileges. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7; PAN-OS 9.1 versions earlier than 9.1.1; All versions of PAN-OS 8.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://security.paloaltonetworks.com/CVE-2020-2015; https://security.paloaltonetworks.com/CVE-2020-2015
CVE: CVE-2020-2016
Published: 2020-05-13
Description: A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root privilege escalation from a limited linux user account. This allows an attacker who has escaped the restricted shell as a low privilege administrator, possibly by exploiting another vulnerability, to escalate privileges to become root user. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; All versions of PAN-OS 8.0.
CVSS Score: 7.0 (HIGH)
CWE: CWE-377, CWE-362
References: https://security.paloaltonetworks.com/CVE-2020-2016; https://security.paloaltonetworks.com/CVE-2020-2016
CVE: CVE-2020-2017
Published: 2020-05-13
Description: A DOM-Based Cross Site Scripting Vulnerability exists in PAN-OS and Panorama Management Web Interfaces. A remote attacker able to convince an authenticated administrator to click on a crafted link to PAN-OS and Panorama Web Interfaces could execute arbitrary JavaScript code in the administrator's browser and perform administrative actions. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.6; All versions of PAN-OS 8.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://security.paloaltonetworks.com/CVE-2020-2017; https://security.paloaltonetworks.com/CVE-2020-2017
CVE: CVE-2020-2018
Published: 2020-05-13
Description: An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue does not affect Panorama configured with custom certificates authentication for communication between Panorama and managed devices. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.12; PAN-OS 9.0 versions earlier than 9.0.6; All versions of PAN-OS 8.0.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://security.paloaltonetworks.com/CVE-2020-2018; https://security.paloaltonetworks.com/CVE-2020-2018
CVE: CVE-2020-11063
Published: 2020-05-13
Description: In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password reset functionality for backend users. This allows an attacker to mount user enumeration based on email addresses assigned to backend user accounts. This has been fixed in 10.4.2.
CVSS Score: 3.7 (LOW)
CWE: CWE-204, CWE-203
References: https://github.com/TYPO3/typo3/commit/14929b98ecda0ce67329b0f25ca7c01ee85df574; https://github.com/TYPO3/typo3/security/advisories/GHSA-347x-877p-hcwx; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-347x-877p-hcwx
CVE: CVE-2020-11064
Published: 2020-05-13
Description: In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, it has been discovered that HTML placeholder attributes containing data of other database records are vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-43gj-mj2w-wh46; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-43gj-mj2w-wh46
CVE: CVE-2020-11065
Published: 2020-05-13
Description: In TYPO3 CMS greater than or equal to 9.5.12 and less than 9.5.17, and greater than or equal to 10.2.0 and less than 10.4.2, it has been discovered that link tags generated by typolink functionality are vulnerable to cross-site scripting; properties being assigned as HTML attributes have not been parsed correctly. This has been fixed in 9.5.17 and 10.4.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4j77-gg36-9864; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4j77-gg36-9864
CVE: CVE-2020-11066
Published: 2020-05-14
Description: In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on malicious user-submitted content can lead to modification of dynamically-determined object attributes and result in triggering deletion of an arbitrary directory in the file system, if it is writable for the web server. It can also trigger message submission via email using the identity of the web site (mail relay). Another insecure deserialization vulnerability is required to actually exploit mentioned aspects. This has been fixed in 9.5.17 and 10.4.2.
CVSS Score: 8.7 (HIGH)
CWE: CWE-915, CWE-1321
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2rxh-h6h9-qrqc; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2rxh-h6h9-qrqc
CVE: CVE-2020-11067
Published: 2020-05-14
Description: In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2wj9-434x-9hvp; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2wj9-434x-9hvp
CVE: CVE-2020-11069
Published: 2020-05-14
Description: In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that the backend user interface and install tool are vulnerable to a same-site request forgery. A backend user can be tricked into interacting with a malicious resource an attacker previously managed to upload to the web server. Scripts are then executed with the privileges of the victims' user session. In a worst-case scenario, new admin users can be created which can directly be used by an attacker. The vulnerability is basically a cross-site request forgery (CSRF) triggered by a cross-site scripting vulnerability (XSS) - but happens on the same target host - thus, it's actually a same-site request forgery. Malicious payload such as HTML containing JavaScript might be provided by either an authenticated backend user or by a non-authenticated user using a third party extension, e.g. file upload in a contact form with knowing the target location. To be successful, the attacked victim requires an active and valid backend or install tool user session at the time of the attack. This has been fixed in 9.5.17 and 10.4.2. The deployment of additional mitigation techniques is suggested as described below. - Sudo Mode Extension This TYPO3 extension intercepts modifications to security relevant database tables, e.g. those storing user accounts or storages of the file abstraction layer. Modifications need to confirmed again by the acting user providing their password again. This technique is known as sudo mode. This way, unintended actions happening in the background can be mitigated. - https://github.com/FriendsOfTYPO3/sudo-mode - https://extensions.typo3.org/extension/sudo_mode - Content Security Policy Content Security Policies tell (modern) browsers how resources served a particular site are handled. It is also possible to disallow script executions for specific locations. In a TYPO3 context, it is suggested to disallow direct script execution at least for locations /fileadmin/ and /uploads/.
CVSS Score: 8.0 (HIGH)
CWE: CWE-346, CWE-352
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-pqg8-crx9-g8m4; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-pqg8-crx9-g8m4
CVE: CVE-2020-5409
Published: 2020-05-14
Description: Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse. (This issue is similar to, but distinct from, CVE-2018-15798.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://tanzu.vmware.com/security/cve-2020-5409; https://tanzu.vmware.com/security/cve-2020-5409
CVE: CVE-2020-5574
Published: 2020-05-14
Description: HTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary HTML attribute value via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://jvn.jp/en/jp/JVN28806943/index.html; https://movabletype.org/news/2020/05/mt[PII_REDACTED]-released.html; https://jvn.jp/en/jp/JVN28806943/index.html
CVE: CVE-2020-5575
Published: 2020-05-14
Description: Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN28806943/index.html; https://movabletype.org/news/2020/05/mt[PII_REDACTED]-released.html; https://jvn.jp/en/jp/JVN28806943/index.html
CVE: CVE-2020-5576
Published: 2020-05-14
Description: Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type 6.5), Movable Type Advanced 6.5.3 and earlier (Movable Type Advanced 6.5), Movable Type 6.3.11 and earlier (Movable Type 6.3), Movable Type Advanced 6.3.11 and earlier (Movable Type 6.3), Movable Type Premium 1.29 and earlier, and Movable Type Premium Advanced 1.29 and earlier) allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN28806943/index.html; https://movabletype.org/news/2020/05/mt[PII_REDACTED]-released.html; https://jvn.jp/en/jp/JVN28806943/index.html