|Impact||CVSS V3 rating: 7.5 (HIGH)|
|Reported||12th April 2020|
|Reported by||Kuncho, an independent Security researcher|
|Fixed||20th April 2020|
|Affected Builds||→ Builds 12.3.xxx - 12.4.195
→ Builds 12.5.000 - 12.5.119
|Fixed in||Builds 12.4.196/12.5.120|
|Overview||Unauthenticated access to API key disclosure from a servlet call.|
|Recommended Fix||→ For builds 12.3.xxx - 12.4.195, please upgrade to OpManager Version 12.4.196.
→ For Builds 12.5.000 - 12.5.119, please upgrade to OpManager Version 12.5.120.
Unauthenticated access to API key disclosure from a servlet call.
Source and Acknowledgements
Find out more about CVE-2020-11946 from the CVE dictionary.