CVE-2020-36528

MEDIUM

Platinum Mobile 1.0.4.850 - Authenticated Broken Access Control in MobileHandler.ashx

Title source: llm

Description

A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component.

References (2)

Core 2

Core References

Exploit, Mailing List, Third Party Advisory x_refsource_misc

http://seclists.org/fulldisclosure/2020/Oct/4

Third Party Advisory, VDB Entry x_refsource_misc

https://vuldb.com/?id.162264

Scores

CVSS v3 5.5

EPSS 0.0072

EPSS Percentile 49.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-264 CWE-287

Status published

Products (1)

platinumchina/platinum_mobile 1.0.4.850

Published Jun 07, 2022

Tracked Since Feb 18, 2026