{"cvss":0.0,"datePublished":"2023-12-19T00:00:00Z","dateUpdated":"2023-12-19T00:00:00Z","description":"lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7.","dueDate":"","id":"CVE-2020-13638","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"rConfig","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"rConfig rConfig Improper Privilege Management","vendor":"rConfig"}