deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7577
Published: 2020-07-14
Description: A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf
CVE: CVE-2020-7578
Published: 2020-07-14
Description: A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Authenticated users could have access to resources they normally would not have. This vulnerability could allow an attacker to view internal information and perform unauthorized changes.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284, CWE-269
References: https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf
CVE: CVE-2020-7581
Published: 2020-07-14
Description: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf
CVE: CVE-2020-7584
Published: 2020-07-14
Description: A vulnerability has been identified in SIMATIC S7-200 SMART CPU family (All versions >= V2.2 < V2.5.1). Affected devices do not properly handle large numbers of new incomming connections and could crash under certain circumstances. An attacker may leverage this to cause a Denial-of-Service situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-589181.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-589181.pdf
CVE: CVE-2020-7587
Published: 2020-07-14
Description: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.
CVSS Score: 8.2 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf
CVE: CVE-2020-7588
Published: 2020-07-14
Description: A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending a specially crafted packet to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf
CVE: CVE-2020-7592
Published: 2020-07-14
Description: A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC HMI KTP700F Mobile Arctic (All versions), SIMATIC HMI Mobile Panels 2nd Generation (All versions), SIMATIC WinCC Runtime Advanced (All versions). Unencrypted communication between the configuration software and the respective device could allow an attacker to capture potential plain text communication and have access to sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-20-196-04; https://cert-portal.siemens.com/productcert/pdf/ssa-364335.pdf
CVE: CVE-2020-7593
Published: 2020-07-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacker could send a specially crafted HTTP request to cause a memory corruption, potentially resulting in remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-573753.pdf; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1069; https://cert-portal.siemens.com/productcert/pdf/ssa-573753.pdf
CVE: CVE-2020-13934
Published: 2020-07-14
Description: An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html; https://lists.apache.org/thread.html/r61f411cf82488d6ec213063fc15feeeb88e31b0ca9c29652ee4f962e%40%3Cannounce.tomcat.apache.org%3E
CVE: CVE-2020-13935
Published: 2020-07-14
Description: The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html; https://kc.mcafee.com/corporate/index?page=content&id=SB10332
CVE: CVE-2020-15721
Published: 2020-07-14
Description: RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md; https://gitlab.com/francoisjacquet/rosariosis/-/commit/c4a694860b50c4aa5c67d6568f7d0613fef1a30d; https://gitlab.com/francoisjacquet/rosariosis/-/issues/291
CVE: CVE-2019-15881
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15882
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15883
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15884
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15885
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15886
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15887
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-15888
Published: 2020-07-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2020-11827
Published: 2020-07-14
Description: In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. After that, the attacker can re-start this service as an unprivileged user to escalate his/her privileges and run commands on the machine with SYSTEM rights.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://fatihhcelik.blogspot.com/2020/04/gog-galaxy-desktop-app-local-privilege.html; https://www.gog.com/galaxy; https://fatihhcelik.blogspot.com/2020/04/gog-galaxy-desktop-app-local-privilege.html
CVE: CVE-2020-13845
Published: 2020-07-14
Description: Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-354
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE: CVE-2020-13846
Published: 2020-07-14
Description: Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE: CVE-2020-13847
Published: 2020-07-14
Description: Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html
CVE: CVE-2020-15074
Published: 2020-07-14
Description: OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-302, CWE-613
References: https://openvpn.net/vpn-server-resources/release-notes/; https://openvpn.net/vpn-server-resources/release-notes/
CVE: CVE-2019-12773
Published: 2020-07-14
Description: An issue was discovered in Verint Impact 360 15.1. At wfo/help/help_popup.jsp, the helpURL parameter can be changed to embed arbitrary content inside of an iFrame. Attackers may use this in conjunction with social engineering to embed malicious scripts or phishing pages on a site where this product is installed, given the attacker can convince a victim to visit a crafted link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158411/Verint-Impact-360-15.1-Script-Insertion-HTML-Injection.html; https://seclists.org/fulldisclosure/2020/Jul/15; http://packetstormsecurity.com/files/158411/Verint-Impact-360-15.1-Script-Insertion-HTML-Injection.html
CVE: CVE-2019-12783
Published: 2020-07-14
Description: An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which users will be redirected after a successful login. In conjunction with CVE-2019-12784, this can be used by attackers to "crowdsource" bruteforce login attempts on the target site, allowing them to guess and potentially compromise valid credentials without ever sending any traffic from their own machine to the target site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://packetstormsecurity.com/files/158412/Verint-Impact-360-15.1-Open-Redirect.html; https://seclists.org/fulldisclosure/2020/Jul/16; http://packetstormsecurity.com/files/158412/Verint-Impact-360-15.1-Open-Redirect.html
CVE: CVE-2019-12784
Published: 2020-07-14
Description: An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the login form can accept submissions from external websites. In conjunction with CVE-2019-12783, this can be used by attackers to "crowdsource" bruteforce login attempts on the target site, allowing them to guess and potentially compromise valid credentials without ever sending any traffic from their own machine to the target site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/158413/Verint-Impact-360-15.1-Cross-Site-Request-Forgery.html; https://seclists.org/fulldisclosure/2020/Jul/17; http://packetstormsecurity.com/files/158413/Verint-Impact-360-15.1-Cross-Site-Request-Forgery.html
CVE: CVE-2020-11546
Published: 2020-07-14
Description: SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://blog.to.com/advisory-superwebmailer-cve-2020-11546/; https://blog.to.com/advisory-superwebmailer-cve-2020-11546/
CVE: CVE-2020-15100
Published: 2020-07-14
Description: In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1.
CVSS Score: 2.8 (LOW)
CWE: CWE-400, CWE-770
References: https://github.com/schokokeksorg/freewvs/commit/18bbf2043e53f69e0119d24f8ae4edb274afb9b2; https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-9cfv-9463-8gqv; https://github.com/schokokeksorg/freewvs/commit/18bbf2043e53f69e0119d24f8ae4edb274afb9b2
CVE: CVE-2020-5373
Published: 2020-07-14
Description: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en; https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en
CVE: CVE-2020-5374
Published: 2020-07-14
Description: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices.
CVSS Score: 8.8 (HIGH)
CWE: CWE-256, CWE-798
References: https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en; https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en
CVE: CVE-2020-9297
Published: 2020-07-14
Description: Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-917
References: https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md; https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md
CVE: CVE-2020-11083
Published: 2020-07-14
Description: In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users of the RainLab.Blog plugin, this has also been fixed in 1.4.1.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/158730/October-CMS-Build-465-XSS-File-Read-File-Deletion-CSV-Injection.html; http://seclists.org/fulldisclosure/2020/Aug/2; https://github.com/octobercms/october/commit/9ecfb4867baae14a0d3f99f5b5c1e8a979ae8746
CVE: CVE-2020-5246
Published: 2020-07-14
Description: Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances with LDAP configuration and where users can craft their own names. This has been patched in version 4.9.
CVSS Score: 7.7 (HIGH)
CWE: CWE-90, CWE-74
References: https://github.com/traccar/traccar/commit/e4f6e74e57ab743b65d49ae00f6624a20ca0291e; https://github.com/traccar/traccar/security/advisories/GHSA-v955-7g22-2p49; https://github.com/traccar/traccar/commit/e4f6e74e57ab743b65d49ae00f6624a20ca0291e
CVE: CVE-2020-11084
Published: 2020-07-14
Description: In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal data (files) from the PC.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78, CWE-77
References: https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjj; https://github.com/yaBobJonez/iPear/security/advisories/GHSA-4xvp-35fx-hjjj
CVE: CVE-2020-15101
Published: 2020-07-14
Description: In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of potentially untrusted users. This has been patched in 0.1.1.
CVSS Score: 2.8 (LOW)
CWE: CWE-400, CWE-674
References: https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e[PII_REDACTED]; https://github.com/schokokeksorg/freewvs/security/advisories/GHSA-7pmh-vrww-25xx; https://github.com/schokokeksorg/freewvs/commit/83a6b55c0435c69f447488b791555e[PII_REDACTED]
CVE: CVE-2020-15104
Published: 2020-07-14
Description: In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly allow a wildcard DNS Subject Alternative Name apply to multiple subdomains. For example, with a SAN of *.example.com, Envoy would incorrectly allow nested.subdomain.example.com, when it should only allow subdomain.example.com. This defect applies to both validating a client TLS certificate in mTLS, and validating a server TLS certificate for upstream connections. This vulnerability is only applicable to situations where an untrusted entity can obtain a signed wildcard TLS certificate for a domain of which you only intend to trust a subdomain of. For example, if you intend to trust api.mysubdomain.example.com, and an untrusted actor can obtain a signed TLS certificate for *.example.com or *.com. Configurations are vulnerable if they use verify_subject_alt_name in any Envoy version, or if they use match_subject_alt_names in version 1.14 or later. This issue has been fixed in Envoy versions 1.12.6, 1.13.4, 1.14.4, 1.15.0.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-w5f5-6qhq-hhrg; https://github.com/envoyproxy/envoy/security/advisories/GHSA-w5f5-6qhq-hhrg
CVE: CVE-2020-1025
Published: 2020-07-14
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access.
To exploit this vulnerability, an attacker would need to modify the token.
The update addresses the vulnerability by modifying how Microsoft SharePoint Server and Skype for Business Server validate tokens.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1025; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1025
CVE: CVE-2020-1032
Published: 2020-07-14
Description: A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1036, CVE-2020-1040, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5044; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1032; https://nvidia.custhelp.com/app/answers/detail/a_id/5044