CVE-2020-13922

Description

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

CVSS Version 3.1

nvd

CVE ID: CVE-2020-13922
Base Score: 6.5
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 2.8

CVSS Version 2.0

nvd

CVE ID: CVE-2020-13922
Base Score: 4.0
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:S/C:N/I:P/A:N

Refrence: NVD