CVE-2020-25846

CVE-2020-25846 is a high-severity vulnerability affecting the NHIServiSignAdapter component of panorama_project. It stems from improper validation of source file paths in the digest generation function, allowing attackers to redirect SMB requests to malicious hosts. This can lead to the leakage of user credentials, with a CVSS score of 7.4 (HIGH) indicating a network-based attack requiring user interaction, resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.