High severity7.1NVD Advisory· Published May 7, 2021· Updated Jun 17, 2026

CVE-2020-36125

Description

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting the endpoint directly.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Paxtechnology/Paxstore
cpe:2.3:a:paxtechnology:paxstore:*:*:*:*:*:*:*:*
Range: <=7.0.8_20200511171508
Pax Technology/PAXSTOREdescription
PAX Technology/PAXSTOREllm-fuzzy
Range: <=v7.0.8_20200511171508

Patches

Vulnerability mechanics

References

blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/nvdExploitThird Party Advisory
marketing.paxtechnology.com/about-paxnvdProduct
www.whatspos.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000