Vulnerabilities > CVE-2020-18701 - Incorrect Authorization vulnerability in Talelin Lin-Cms-Flask 0.1.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |