PT-2020-15061
CVE-2020-1790
·
تاريخ النشر
2020-02-18
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GaussDB 200 version 6.5.1
Description
The issue arises from the software's construction of commands using external input from users without sufficient validation of the input. This allows an attacker to potentially inject certain commands.
Recommendations
For GaussDB 200 version 6.5.1, ensure that user input is thoroughly validated to prevent command injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾