Search vulnerabilities

Results 2

Export CSV
CVE-2020-25846

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
CVE-2020-25845

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1

Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed