Unscored CVE-2020-25564 EUVD-2020-18248GHSA-hcp9-gj5q-mc9r

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly access…

Published Aug 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.

References

https://vuln.shellcoder.party/tags/sapphireims/
https://vuln.shellcoder.party/2020/09/19/cve-2020-25564-sapphireims-unprivileged-user-remote-command-execution-create-local-admin-on-clients/