Skip to content
OpenAdvisories
High · 7.5 CVE-2020-25846 EUVD-2020-18479GHSA-6553-8h6r-vxxh

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2

Published Dec 31, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

Affected products

VendorProductAffectedFixed
CHANGING NHIServiSignAdapter 1.0.20.0218 —

References