CVE-2020-16240 - AskarLabs CVE Database

CVE-2020-16240

Vendor N/A

Product GE Digital APM Classic

Weakness CWE-639 · IDOR

Published September 23, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JSON) format by users who should not have access to such functionality. An attacker can download sensitive data related to user accounts without having the proper privileges.

Key dates

02Disclosure timeline

September 23, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-16240 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/639.html

Related vulnerabilities

04Related CVE

CVE-2025-43732 CVE-2021-47721 Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation CVE-2026-6976 Authorization Bypass Through User-Controlled Key in GitLab CVE-2023-48304 Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user CVE-2024-52507 Share information of the Nextcloud Tables app is not limited to affected users