THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2020-9384

Reserved:2020-02-24
Published:2020-04-14
Updated:2024-06-10

Description

An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipulation of POST parameters. NOTE: This vulnerability may only affect a testing version of the application

References

https://www.subex.com/partner-settlement/

http://packetstormsecurity.com/files/157197/Subex-ROC-Partner-Settlement-10.5-Insecure-Direct-Object-Reference.html

cve.org CVE-2020-9384

nvd.nist.gov CVE-2020-9384

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2020-9384