{"id":"CVE-2020-14944","aliases":["EUVD-2020-7079","GHSA-69q6-gh68-57p3"],"status":"published","title":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple...","description":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06338,"percentile":0.9368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-862","CWE-863"],"published":"2020-06-22T21:48:58Z","modified":"2026-06-17T02:55:49Z","exploits":[{"source":"exploitdb","id":"EDB-48653","title":"BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)","type":"webapps","platform":"hardware","date":"2020-07-08","url":"https://www.exploit-db.com/exploits/48653"}],"products":[{"vendor":"globalradar","product":"bsa_radar"}],"references":[{"url":"https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14944%20-%20Access%20Control%20Vulnerabilities.md","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/158372/BSA-Radar-1.6.7234.24750-Cross-Site-Request-Forgery.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14944"},{"url":"https://github.com/advisories/GHSA-69q6-gh68-57p3"}],"sources":{"cve":[{"id":"CVE-2020-14944","description":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.","status":"published","published":"2020-06-22T21:48:58Z","modified":"2024-08-04T13:00:52.014Z","updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2020-7079","description":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.","status":"published","published":"2020-06-22T21:48:58Z","modified":"2024-08-04T13:00:52Z","updated_at":"2026-11-03T03:07:33.617168Z"}],"ghsa":[{"id":"GHSA-69q6-gh68-57p3","title":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple...","description":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.","status":"published","published":"2022-05-24T17:21:29Z","modified":"2023-01-29T05:03:08Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-862","CWE-863"],"updated_at":"2026-11-02T14:45:15.109911Z"}],"nvd":[{"id":"CVE-2020-14944","description":"Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.","status":"published","published":"2020-06-22T22:15:12.883Z","modified":"2026-06-17T02:55:49.067Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:06:07.249892Z"}]}}