Unrated severityNVD Advisory· Published Mar 21, 2021· Updated Aug 4, 2024
CVE-2020-13963
CVE-2020-13963
Description
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp (which is a guest account).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- SOPlanning/SOPlanningdescription
- Range: <1.47
Patches
Vulnerability mechanics
References
3- cwe.mitre.org/data/definitions/321.htmlmitrex_refsource_MISC
- forum.soplanning.org/viewforum.phpmitrex_refsource_MISC
- labs.integrity.pt/advisories/cve-2020-13963/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.