PT-2020-20518
CVE-2020-9137
·
تاريخ النشر
2020-12-02
·
تاريخ التحديث
2020-12-28
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CloudEngine 12800 (affected versions not specified)
CloudEngine 5800 (affected versions not specified)
CloudEngine 6800 (affected versions not specified)
CloudEngine 7800 (affected versions not specified)
Description
The issue is related to a privilege escalation vulnerability due to insufficient input validation. A local attacker with high privilege may execute specially crafted scripts in the affected products, leading to privilege escalation.
Recommendations
For CloudEngine 12800, update to a version that addresses the insufficient input validation issue.
For CloudEngine 5800, update to a version that addresses the insufficient input validation issue.
For CloudEngine 6800, update to a version that addresses the insufficient input validation issue.
For CloudEngine 7800, update to a version that addresses the insufficient input validation issue.
As a temporary workaround, consider restricting the execution of specially crafted scripts in the affected products until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾