CVE-2020-36923 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers c…
Medium CVSS: 6.9

CVE-2020-36923

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.
Vendor
Sony
Product
Bravia Signage
CWE
CWE-639
Yayın Tarihi
2026-01-06 16:15:48
Güncelleme
2026-01-22 21:15:17
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-639 Bravia Signage MEDIUM Sony 2026

Referanslar

https://cxsecurity.com/issue/WLB-2020120031 https://exchange.xforce.ibmcloud.com/vulnerabilities/192607 https://packetstormsecurity.com/files/160344 https://pro-bravia.sony.net https://pro-bravia.sony.net/resources/software/bravia-signage/ https://pro.sony/ue_US/products/display-software https://www.vulncheck.com/advisories/sony-bravia-digital-signage-client-side-protection-bypass-via-idor https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5611.php https://www.zeroscience.mk/codes/sonybravia_idor.txt https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5611.php