Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-36128 State: PUBLISHED Published: 2021-05-07T10:34:41 Last Updated: 2024-08-04T17:16:14.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability. Each payment terminal has a session token (called X-Terminal-Token) to access the marketplace. This allows the store to identify the terminal and make available the applications distributed by its reseller. By intercepting HTTPS traffic from the application store, it is possible to collect the request responsible for assigning the X-Terminal-Token to the terminal, which makes it possible to craft an X-Terminal-Token pretendi
nsible for assigning the X-Terminal-Token to the terminal, which makes it possible to craft an X-Terminal-Token pretending to be another device. An attacker can use this behavior to authenticate its own payment terminal in the application store through token impersonation. Additional Analyst Notes: - CVE Program Container: References: - https://marketing.paxtechnology.com/about-pax - https://www.whatspos.com/ - https://blog.pridesec.com.br/p/4c972078-5f01-419e-8bea-cf31ff2e3670/
CVE ID: CVE-2020-36129 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2912&q=&can=1 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36130 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2905&q=&can=1 - https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html - https://www.debian.org/security/2023/dsa-5490 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36131 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2911&q=&can=1 - https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html - https://www.debian.org/security/2023/dsa-5490 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36133 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2913&q=&can=1 - https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html - https://www.debian.org/security/2023/dsa-5490 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36134 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2914 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36135 State: PUBLISHED Published: 2021-12-02T00:00:00 Last Updated: 2024-08-04T17:16:14.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/aomedia/issues/detail?id=2910&q=&can=1 - https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html - https://www.debian.org/security/2023/dsa-5490 - https://security.gentoo.org/glsa/202401-32
CVE ID: CVE-2020-36136 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T17:52:43.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cskaza/cszcms/issues/26
CVE ID: CVE-2020-36138 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T17:52:06.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trac.ffmpeg.org/ticket/8960 - https://github.com/FFmpeg/FFmpeg/commit/292e41ce650a7b5ca5de4ae87fff0d6a90d9fc97 - https://lists.ffmpeg.org/pipermail/ffmpeg-devel/2020-November/272001.html
CVE ID: CVE-2020-36139 State: PUBLISHED Published: 2021-06-04T15:04:00 Last Updated: 2024-08-04T17:23:09.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS payload within the 'fileurl' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html
CVE ID: CVE-2020-36140 State: PUBLISHED Published: 2021-06-04T15:03:51 Last Updated: 2024-08-04T17:23:09.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely). Additional Analyst Notes: - CVE Program Container: References: - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html
CVE ID: CVE-2020-36141 State: PUBLISHED Published: 2021-06-04T15:03:38 Last Updated: 2024-08-04T17:23:09.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header. Additional Analyst Notes: - CVE Program Container: References: - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html
CVE ID: CVE-2020-36142 State: PUBLISHED Published: 2021-06-04T15:03:28 Last Updated: 2024-08-04T17:23:09.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html
CVE ID: CVE-2020-36144 State: PUBLISHED Published: 2021-03-18T19:37:28 Last Updated: 2024-08-04T17:23:09.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getredash/redash/releases - https://github.com/getredash/redash/issues/5426
CVE ID: CVE-2020-36148 State: PUBLISHED Published: 2021-02-08T20:13:35 Last Updated: 2024-08-04T17:23:09.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/138 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZ
8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
CVE ID: CVE-2020-36149 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-04T17:23:09.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/137 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZ
7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
CVE ID: CVE-2020-36150 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-04T17:23:09.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/135 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
CVE ID: CVE-2020-36151 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-04T17:23:09.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/134 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
CVE ID: CVE-2020-36152 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-04T17:23:09.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/136 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQLNZOVVONQSZZJHQVZT6NMOUUDMGBBR/
CVE ID: CVE-2020-36154 State: PUBLISHED Published: 2021-01-04T16:13:36 Last Updated: 2024-08-04T17:23:09.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/passtheticket/vulnerability-research/blob/main/privilege-escalation/pearsonvue-readme.md - https://www.exploit-db.com/exploits/49143
CVE ID: CVE-2020-36155 State: PUBLISHED Published: 2021-01-04T17:22:46 Last Updated: 2024-08-04T17:23:09.548Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wp_capabilities user meta that defines a user's role. During the registration process, submitted registration details were passed to the update_profile function, and any metadata was accepted, e.g., wp_capabilities[administrator] for Admi
were passed to the update_profile function, and any metadata was accepted, e.g., wp_capabilities[administrator] for Administrator access. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ - https://wpscan.com/vulnerability/cf13b0f8-5815-4d27-a276-5eff8985fc0b
CVE ID: CVE-2020-36156 State: PUBLISHED Published: 2021-01-04T17:22:25 Last Updated: 2024-08-04T17:23:09.556Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page could supply the parameter um-role with a value set to any role (e.g., Administrator) during a profile update, and effectively escalate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-me
r privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ - https://wpscan.com/vulnerability/dd4c4ece-7206-4788-8747-f0c0f3ab0a53
CVE ID: CVE-2020-36157 State: PUBLISHED Published: 2021-01-04T17:22:05 Last Updated: 2024-08-04T17:23:09.403Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an attacker could supply the role parameter with a WordPress capability (or any custom Ultimate Member role) and effectively be granted those privileges. Additional Analyst Notes: - CVE Program Container: Refer
imate Member role) and effectively be granted those privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://www.wordfence.com/blog/2020/11/critical-privilege-escalation-vulnerabilities-affect-100k-sites-using-ultimate-member-plugin/ - https://wpscan.com/vulnerability/33f059c5-58e5-44b9-bb27-793c3cedef3b
CVE ID: CVE-2020-36158 State: PUBLISHED Published: 2021-01-05T04:25:16 Last Updated: 2024-08-04T17:23:09.558Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/project/linux-wireless/patch/20201206084801.26479-1-ruc_zhangxiaohui%40163.com/ - https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui%4016
01206084801.26479-1-ruc_zhangxiaohui%40163.com/ - https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui%40163.com - https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03d - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c455c5ab332773464d02ba17015acdca198f03d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCHBIRS27VMOGMBHPWP2R7SZRFXT6O6U/ - https://www.debian.org/security/2021/dsa-4843 - https://security.netapp.com/advisory/ntap-20210212-0002/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00010
sts.debian.org/debian-lts-announce/2021/02/msg00018.html - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
CVE ID: CVE-2020-36159 State: PUBLISHED Published: 2021-01-05T18:49:30 Last Updated: 2024-08-04T17:23:09.535Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-007
CVE ID: CVE-2020-36160 State: PUBLISHED Published: 2021-01-06T00:53:08 Last Updated: 2024-08-04T17:23:09.268Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts to load the from \usr\local\ssl\openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code ex
ate a C:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data and installed applications, etc. If the system is also an Active Directory domain controller, then this can affect the entire domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-017
CVE ID: CVE-2020-36161 State: PUBLISHED Published: 2021-01-06T00:52:56 Last Updated: 2024-08-04T17:23:09.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a directory at the configuration file locations. When the Windows system restarts, a malicious OpenSSL engine could exploit arbitrary code execution as SYSTEM. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. Additional Analyst Notes:
llowing the attacker (by default) to access all data, access all installed applications, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-009
CVE ID: CVE-2020-36162 State: PUBLISHED Published: 2021-01-06T00:52:38 Last Updated: 2024-08-04T17:23:09.350Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which does not exist. By default, on Windows systems users can create directories under <drive>:\. A low privileged user can create a <drive>:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, which may result in arbitr
e a <drive>:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, which may result in arbitrary code execution. This would give the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-011
CVE ID: CVE-2020-36163 State: PUBLISHED Published: 2021-01-06T00:52:20 Last Updated: 2024-08-04T17:23:09.331Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under C:\. If a low privileged user on the Windows system creates an affected path with a library that NetBackup attempts to load, they can execute arbitrary code as
dows system creates an affected path with a library that NetBackup attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This affects NetBackup master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade on all systems and post-install on Master, Media, and OpsCenter servers during normal operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue2
CVE ID: CVE-2020-36164 State: PUBLISHED Published: 2021-01-06T00:52:05 Last Updated: 2024-08-04T17:23:09.477Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file (which does not exist) at the following locations in both the System drive (typically C:\) and the product's installation drive (typically not C:\): \Isode\etc\ssl\openssl.cnf (on SMTP Server) or \user\ssl\openssl.cnf (on other affected components). By default, on Windo
Isode\etc\ssl\openssl.cnf (on SMTP Server) or \user\ssl\openssl.cnf (on other affected components). By default, on Windows systems, users can create directories under C:\. A low privileged user can create a openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability only affects a server with MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server. Add
Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-013
CVE ID: CVE-2020-36165 State: PUBLISHED Published: 2021-01-06T00:51:52 Last Updated: 2024-08-04T17:23:09.291Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:/ReleaseX64/ssl/openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbi