Unscored CVE-2020-15027 EUVD-2020-7155GHSA-g8x9-c837-mpx5

ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a serie…

Published Jul 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12.

References

https://slagle.tech/2020/07/06/cve-2020-15027/