PT-2021-12686
CVE-2020-7865
·
تاريخ النشر
2021-09-07
·
تاريخ التحديث
2021-09-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
ExECM CoreB2B solution (affected versions not specified)
Description:
A vulnerability in the ExECM CoreB2B solution, due to improper input validation, allows an unauthenticated attacker to download and execute an arbitrary file via the
httpDownload function. This could enable the attacker to hijack the vulnerable system.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾