CVE-2020-25842 — CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Published: 2020-12-31 · CVSS: 7.5 · CVSS 3.1

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7