CVE-2020-28054 Auth bypass in n/a
Attackers can bypass authentication in JamoDat TSMManager Collector to administer instances and access sensitive data if the Viewer is modified.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-28054?
CVE-2020-28054 is a high-severity authentication bypass vulnerability in n/a, published on 19 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
JamoDat TSMManager Collector version up to 6.5.0.21 is vulnerable to an Authorization Bypass because the Collector component is not properly validating an authenticated session with the Viewer. If the Viewer has been modified (binary patched) and the Bypass Login functionality is being used, an attacker can request every Collector's functionality as if they were a properly logged-in user: administrating connected instances, reviewing logs, editing configurations, accessing the instances' consoles, accessing hardware configurations, etc.Exploiting this vulnerability won't grant an attacker access nor control on remote ISP servers as no credentials is sent with the request.
Which versions are affected by CVE-2020-28054?
It affects 1 product.
Products include Tsmmanager Tsmmanager.
How do I fix CVE-2020-28054?
No fix has been published for CVE-2020-28054 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-28054 being exploited?
There is no known exploitation of CVE-2020-28054 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-2cqv-mfgc-j2h4.