Skip to content
OpenAdvisories
High · 7.5 CVE-2020-25845 EUVD-2020-18478GHSA-7555-8m6j-6q57

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1

Published Dec 31, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

Affected products

VendorProductAffectedFixed
CHANGING NHIServiSignAdapter 1.0.20.0218 —

References