CVE-2020-18305

{"id": "CVE-2020-18305", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "published": "2024-05-14T06:36:01.630", "references": [{"url": "https://gist.github.com/yasinyilmaz/1fe3fe58dd275edb77dcbe890fce2f2c", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://gist.github.com/yasinyilmaz/1fe3fe58dd275edb77dcbe890fce2f2c", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges."}, {"lang": "es", "value": "Se descubri\u00f3 que Extreme Networks EXOS anteriores a v.22.7 y anteriores a v.30.2 conten\u00eda un problema en su GUI web que no restringe el acceso a la URL, lo que permite a los atacantes acceder a informaci\u00f3n confidencial o escalar privilegios."}], "lastModified": "2025-06-11T14:57:21.840", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:extremenetworks:extremexos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37518AD5-2C1D-4987-A763-C7FC979DE85E", "versionEndExcluding": "22.7"}, {"criteria": "cpe:2.3:o:extremenetworks:extremexos:30.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "346C9759-A35D-4310-B8F1-2CBB50F183C8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}