CVE Catalog
CVE-2020-36923
CriticalSummary
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.
Risk Assessment
Attackers can access administrative functions, leading to unauthorized changes in the system.
Recommendation
Upgrade the software to the latest version. Implement server-side access control.
Original NVD description (English source)
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.