CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2020-13963
Severity
CRITICAL
CVSS
9.8
EPSS
1.81%
Original NVD Description
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp (which is a guest account).
Related CVEs
Other vulnerabilities affecting the same vendor(s)