CVE-2020-11680

Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a normal user can perform actions including, but not limited to, creating/modifying the file store, creating/modifying alerts, creating/modifying users, etc.

• CWE-862

• http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
• https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypassThird Party Advisory
• http://packetstormsecurity.com/files/157954/Castel-NextGen-DVR-1.0.0-Bypass-CSRF-Disclosure.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Jun/8Mailing List, Third Party Advisory
• https://www.securitymetrics.com/blog/attackers-known-unknown-authorization-bypassThird Party Advisory

Published

Jun 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11673An issue was discovered in the Responsive Poll through 1.3.4…9.8
• CVE-2020-11674Cerner medico 26.00 allows variable reuse, possibly causing …8.8
• CVE-2020-11675Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of …8.8
• CVE-2020-11676Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of …8.8
• CVE-2020-11677Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of …8.8
• CVE-2020-11679Castel NextGen DVR v1.0.0 is vulnerable to privilege escalat…8.8
• CVE-2020-11681Castel NextGen DVR v1.0.0 stores and displays credentials fo…8.1
• CVE-2020-11682Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state…6.5
• CVE-2020-11683A timing side channel was discovered in AT91bootstrap before…6.8
• CVE-2020-11684AT91bootstrap before 3.9.2 does not properly wipe encryption…9.1
• CVE-2020-11685In JetBrains GoLand before 2019.3.2, the plugin repository w…7.5
• CVE-2020-11686In JetBrains TeamCity before 2019.1.4, a project administrat…2.7