CVE-2020-13462: Tufin Securetrack

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.

Affected products

• Tufin Securetrack: before r20-2 (fixed in r20-2)

Published 2021-02-09. Last modified 2026-06-17.