CVE-2020-25563

CVE-2020-25563 is a critical authentication bypass vulnerability affecting SapphireIMS 5.0, allowing an unauthenticated attacker to create a local administrator account on any client. This flaw, rated 9.8 CVSS (Critical), stems from direct access to the RemoteMgmtTaskSave feature without requiring a JSESSIONID, enabling full compromise (Confidentiality, Integrity, Availability). While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.