Read the docs

GRANDIT CORPORATION

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

GRANDIT CORPORATION records in CISA KEV

No GRANDIT CORPORATION vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

TI-2020-04509 CVE-2020-5539 · GHSA-4vhp-vr67-vg4f

Authorization bypass in GRANDIT

Priority LOW 30

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00842 Published 2020-03-02 No fix listed CWE-639
Open these records in search →