CVE-2020-36528mediumCWE-264

CVE-2020-36528: medium-severity vulnerability in Platinum Mobile

Platinum Mobile MobileHandler.ashx access control

Published · Updated

Follow this CVE+ Monitor Platinum Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.8%
A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
unspecified · Platinum Mobile