High severity7.5NVD Advisory· Published Jun 24, 2020· Updated Jun 17, 2026
CVE-2020-14017
CVE-2020-14017
Description
An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the contents of this file to discover details about a session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Navigate CMS/Navigate CMSdescription
- Range: = 2.9 r1433
Patches
Vulnerability mechanics
References
1- blog.sean-wright.com/navigate-cms/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.