CVE-2020-21990

Description

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.

References

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5555.php

https://www.exploit-db.com/exploits/47824

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3