← CVE Intelligence

CVE-2020-25846

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2 PUBLISHED

Description (CNA)

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

Affected (CNA)

Vendor / productVersions
CHANGING Inc. / NHIServiSignAdapteraffected 1.0.20.0218

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.