CVE-2020-9300: netflix dispatch
Vulnerability summary
CVE-2020-9300 is a medium (CVSS 6.5) vulnerability in netflix dispatch. EPSS estimates a 0.94% chance of exploitation in the next 30 days, higher than 60.3% of scored vulnerabilities.
Timeline
- 09-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure deployment guidelines the risk of this is lowered, as this may only be exploited by an authenticated user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.94%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.94% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Netflix1 product
- dispatch< 20201106
1 vendor · 1 product
References
2 links- github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-005.mdX Refsource MISCThird Party Advisory