PT-2020-19267
CVE-2020-6855
·
تاريخ النشر
2020-02-06
·
تاريخ التحديث
2020-02-07
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
SOS JobScheduler versions 1.11 through 1.13.2
Description
A large or infinite loop issue in the JOC Cockpit component allows attackers to parameterize housekeeping jobs, potentially exhausting system resources and resulting in a denial of service.
Recommendations
For SOS JobScheduler versions 1.11 through 1.13.2, consider restricting access to the JOC Cockpit component to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾