CVE-2020-15170

CVE-2020-15170 describes an access control vulnerability in apollo-adminservice versions prior to 1.7.1, affecting Ctrip Apollo. If exposed to the internet, this flaw allows unauthenticated attackers to directly access and modify application configurations due to the service's design for intranet use without built-in access controls. With a CVSS score of 7.0 (High), this vulnerability has a network attack vector and low attack complexity, potentially leading to limited confidentiality, high integrity, and low availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.