AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-13963

CRITICAL · CVSS 9.8 EPSS 1.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-13963
Severity
CRITICAL
CVSS
9.8
EPSS
1.81%

Original NVD Description

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp (which is a guest account).