deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-29075
Published: 2021-02-23
Description: Acrobat Reader DC versions 2[PII_REDACTED]6 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]0 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20, CWE-200
References: https://helpx.adobe.com/security/products/acrobat/apsb20-75.html; https://helpx.adobe.com/security/products/acrobat/apsb20-75.html
CVE: CVE-2021-22643
Published: 2021-02-23
Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01; https://www.zerodayinitiative.com/advisories/ZDI-21-316/
CVE: CVE-2021-22645
Published: 2021-02-23
Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning.
CVSS Score: 7.8 (HIGH)
CWE: CWE-357
References: https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01; https://www.zerodayinitiative.com/advisories/ZDI-21-323/
CVE: CVE-2021-22647
Published: 2021-02-23
Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01; https://www.zerodayinitiative.com/advisories/ZDI-21-318/
CVE: CVE-2021-22649
Published: 2021-02-23
Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822, CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01; https://www.zerodayinitiative.com/advisories/ZDI-21-317/
CVE: CVE-2020-13697
Published: 2021-02-23
Description: An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler is vulnerable to reflected XSS, because the GeneralHandler GET handler prints user input passed through the query string without any sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/NanoHttpd/nanohttpd; https://www.vdoo.com/advisories; https://github.com/NanoHttpd/nanohttpd
CVE: CVE-2020-8902
Published: 2021-02-23
Description: Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are to upgrade your rendertron to version 3.0.0, or, if you cannot update, to secure the infrastructure to limit the headless chrome's access to your internal domain.
CVSS Score: 3.5 (LOW)
CWE: CWE-284, CWE-918
References: https://github.com/GoogleChrome/rendertron/releases/tag/3.0.0; https://github.com/GoogleChrome/rendertron/releases/tag/3.0.0
CVE: CVE-2020-14359
Published: 2021-02-23
Description: A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an attacker can bypass our Gatekeeper. Lower case headers are also accepted by some webservers (e.g. Jetty). This means there is no protection when we put a Gatekeeper in front of a Jetty server and use lowercase headers.
CVSS Score: 7.3 (HIGH)
CWE: CWE-305
References: https://bugzilla.redhat.com/show_bug.cgi?id=1868591; https://issues.jboss.org/browse/KEYCLOAK-14090; https://bugzilla.redhat.com/show_bug.cgi?id=1868591
CVE: CVE-2021-20242
Published: 2021-02-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-20176. Reason: This candidate is a reservation duplicate of CVE-2021-20176. Notes: All CVE users should reference CVE-2021-20176 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2020-28429
Published: 2021-02-23
Description: All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-GEOJSON2KML-1050412; https://snyk.io/vuln/SNYK-JS-GEOJSON2KML-1050412
CVE: CVE-2021-27550
Published: 2021-02-23
Description: Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://gist.github.com/sqrtrev/1f9986d4bdd1393832c60a97b56e170a; https://gist.github.com/sqrtrev/1f9986d4bdd1393832c60a97b56e170a
CVE: CVE-2021-3252
Published: 2021-02-23
Description: KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.html; https://twitter.com/Kevin2600/status/[PII_REDACTED]01023238; https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01
CVE: CVE-2020-28430
Published: 2021-02-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-28431
Published: 2021-02-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CWE: CWE-78
CVE: CVE-2020-28432
Published: 2021-02-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CWE: CWE-78
CVE: CVE-2020-4953
Published: 2021-02-23
Description: IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP repsonses. IBM X-Force ID: 192029.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192029; https://www.ibm.com/support/pages/node/6412707; https://exchange.xforce.ibmcloud.com/vulnerabilities/192029
CVE: CVE-2020-7847
Published: 2021-02-23
Description: The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.
CVSS Score: 7.4 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35921; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35921
CVE: CVE-2021-25630
Published: 2021-02-23
Description: "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this check was wrong, so a normal user could start "loolforkit" and eventually get local root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-49w3-gr3w-m68v; https://www.openwall.com/lists/oss-security/2021/01/18/3; https://github.com/CollaboraOnline/online/security/advisories/GHSA-49w3-gr3w-m68v
CVE: CVE-2020-16243
Published: 2021-02-23
Description: Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the privileges of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-20-238-03
CVE: CVE-2020-25161
Published: 2021-02-23
Description: The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-73, CWE-610
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-289-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-289-01
CVE: CVE-2020-26609
Published: 2021-02-23
Description: fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta; https://github.com/BigTiger2020/Fastadmin-V1.0.0.20200506_beta/blob/main/README.md; https://github.com/karsonzhang/fastadmin
CVE: CVE-2021-20226
Published: 2021-02-23
Description: A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use. The highest threat from this vulnerability is to data integrity, confidentiality and system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1873476; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1873476
CVE: CVE-2021-20230
Published: 2021-02-23
Description: A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the tunneled service instead of being redirected to the address specified in the redirect option. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=1925226; https://github.com/mtrojnar/stunnel/commit/ebad9ddc4efb2635f37174c9d800d06206f1edf9; https://security.gentoo.org/glsa/202105-02
CVE: CVE-2021-22113
Published: 2021-02-23
Description: Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall (enabled by default for all URLs) are not affected by the vulnerability, as they reject requests that allow bypassing.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://tanzu.vmware.com/security/cve-2021-22113; https://tanzu.vmware.com/security/cve-2021-22113
CVE: CVE-2021-26685
Published: 2021-02-23
Description: A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-20198
Published: 2021-02-23
Description: A flaw was found in the OpenShift Installer before version v0.9.0-master.0[PII_REDACTED]0451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-306
References: https://bugzilla.redhat.com/show_bug.cgi?id=1920764; https://bugzilla.redhat.com/show_bug.cgi?id=1920764
CVE: CVE-2021-20220
Published: 2021-02-23
Description: A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://bugzilla.redhat.com/show_bug.cgi?id=1923133; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1923133
CVE: CVE-2021-20229
Published: 2021-02-23
Description: A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1925296; https://security.gentoo.org/glsa/202105-32; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-22651
Published: 2021-02-23
Description: When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01; https://www.zerodayinitiative.com/advisories/ZDI-21-324/
CVE: CVE-2021-26678
Published: 2021-02-23
Description: A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26681
Published: 2021-02-23
Description: A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26682
Published: 2021-02-23
Description: A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the guest portal interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26683
Published: 2021-02-23
Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26684
Published: 2021-02-23
Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26686
Published: 2021-02-23
Description: A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26926
Published: 2021-02-23
Description: A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f[PII_REDACTED]f5cd9b; https://github.com/jasper-software/jasper/issues/264; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/
CVE: CVE-2021-27579
Published: 2021-02-23
Description: Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings.
CVSS Score: 7.8 (HIGH)
References: https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2; https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2
CVE: CVE-2021-27582
Published: 2021-02-23
Description: org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment (aka Autobinding) vulnerability. This arises due to unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, in which HTTP request parameters affect an authorizationRequest.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1321
References: http://agrrrdog.blogspot.com/2017/03/autobinding-vulns-and-spring-mvc.html; https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/commit/7eba3c12fed82388f917e8dd9b73e86e3a311e4c; https://portswigger.net/research/hidden-oauth-attack-vectors
CVE: CVE-2020-27782
Published: 2021-02-23
Description: A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1901304; https://bugzilla.redhat.com/show_bug.cgi?id=1901304
CVE: CVE-2020-28587
Published: 2021-02-23
Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014).
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210
CVE: CVE-2020-7120
Published: 2021-02-23
Description: A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a local attacker to execute arbitrary code within the context the binary is running in, which is a lower privileged account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt