Skip to main content

Business Workflow CVE-2020-26171

MEDIUM
Authorization Bypass Through User-Controlled Key (CWE-639)
2020-12-18 cve@mitre.org
Authentication Bypass Business Workflow
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 18, 2020 - 10:15 nvd
MEDIUM 4.3

DescriptionNVD

In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them.

AnalysisAI

In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-639. In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them. Affected products include: Tangro Business Workflow. Version information: before 1.18.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Business Workflow

View all
CVE-2020-26174 HIGH POC
8.8 Dec 18

tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the
CVE-2020-26175 MEDIUM POC
6.5 Dec 18

In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in
CVE-2020-26172 MEDIUM POC
6.5 Dec 18

Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse th
CVE-2020-26178 MEDIUM POC
5.3 Dec 18

In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments wit
CVE-2020-26177 MEDIUM POC
4.3 Dec 18

In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not int
CVE-2020-26176 MEDIUM POC
4.3 Dec 18

An issue was discovered in tangro Business Workflow before 1.18.1. Rated medium severity (CVSS 4.3), this vulnerability

CVE-2020-26173 MEDIUM POC
4.3 Dec 18

An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download docu
CVE-2024-34689 MEDIUM
5.0 Jul 09

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the

Same weakness CWE-639 – Authorization Bypass Through User-Controlled Key

View all
CVE-2024-50483 CRITICAL
9.8
CVE-2026-55255 HIGH POC
8.4
CVE-2025-3605 CRITICAL POC
9.8
CVE-2022-3805 HIGH POC
8.6
CVE-2025-5947 CRITICAL POC
9.8
CVE-2020-36923 CRITICAL POC
9.8
CVE-2023-3048 CRITICAL POC
9.8
CVE-2024-27730 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2020-26171 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy