PT-2020-15121
CVE-2020-1853
·
تاريخ النشر
2020-02-17
·
تاريخ التحديث
2020-02-19
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GaussDB 200 version 6.5.1
Description
The issue is related to a path traversal vulnerability due to insufficient input path validation. An authenticated attacker can exploit this to traverse directories and download files to a specific directory, potentially causing information leakage.
Recommendations
For GaussDB 200 version 6.5.1, consider restricting access to sensitive directories and files as a temporary mitigation measure until a patch is available. Additionally, ensure that input path validation is properly implemented to prevent directory traversal attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾