CVE-2020-36128

Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (called X-Terminal-Token) to access the marketplace. This allows the store to identify the terminal and make available the applications distributed by its reseller. By intercepting HTTPS traffic from the application store, it is possible to collect the request responsible for assigning the X-Terminal-Token to the terminal, which makes it possible to craft an X-Terminal-Token pretending to be another device. An attacker can use this behavior to authenticate its own payment terminal in the application store through token impersonation.

• CWE-290

• https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/Exploit, Third Party Advisory
• https://marketing.paxtechnology.com/about-paxProduct
• https://www.whatspos.com/Product
• https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/Exploit, Third Party Advisory
• https://marketing.paxtechnology.com/about-paxProduct
• https://www.whatspos.com/Product

Published

May 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36120Buffer Overflow in the "sixel_encoder_encode_bytes" function…7.5
• CVE-2020-36123Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36124Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is a…6.5
• CVE-2020-36125Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is a…7.1
• CVE-2020-36126Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is a…8.1
• CVE-2020-36127Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is a…6.5
• CVE-2020-36129AOM v2.0.1 was discovered to contain a stack buffer overflow…8.8
• CVE-2020-3613Double free issue in kernel memory mapping due to lack of me…7.8
• CVE-2020-36130AOM v2.0.1 was discovered to contain a NULL pointer derefere…6.5
• CVE-2020-36131AOM v2.0.1 was discovered to contain a stack buffer overflow…8.8
• CVE-2020-36133AOM v2.0.1 was discovered to contain a global buffer overflo…8.8
• CVE-2020-36134AOM v2.0.1 was discovered to contain a segmentation violatio…6.5