deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7017
Published: 2020-07-27
Description: In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786; https://www.elastic.co/community/security/; https://www.oracle.com//security-alerts/cpujul2021.html
CVE: CVE-2020-10609
Published: 2020-07-27
Description: Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-256, CWE-522
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-189-01; https://us-cert.cisa.gov/ics/advisories/icsa-20-189-01
CVE: CVE-2020-1425
Published: 2020-07-27
Description: A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1425; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1425
CVE: CVE-2020-1457
Published: 2020-07-27
Description: A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1457; https://www.zerodayinitiative.com/advisories/ZDI-20-1081/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1457
CVE: CVE-2020-8558
Published: 2020-07-27
Description: The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-420
References: https://github.com/kubernetes/kubernetes/issues/92315; https://groups.google.com/g/kubernetes-announce/c/sI4KmlH3S2I/m/TljjxOBvBQAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-10643
Published: 2020-07-27
Description: An authenticated remote attacker could use specially crafted URLs to send a victim using PI Vision 2019 mobile to a vulnerable web page due to a known issue in a third-party component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-12460
Published: 2020-07-27
Description: OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the function opendmarc_xml_parse that can result in a one-byte heap overflow in opendmarc_xml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a '\0' byte overwrites the heap metadata of the next chunk and its PREV_INUSE flag.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/trusteddomainproject/OpenDMARC/issues/64; https://lists.debian.org/debian-lts-announce/2021/04/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2D4JGHMALEJEWWG56DKR5OZB22TK7W5B/
CVE: CVE-2020-12845
Published: 2020-07-27
Description: Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a malformed Authorization header that is mishandled during a cherokee_buffer_add call within cherokee_validator_parse_basic or cherokee_validator_parse_digest.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://cherokee-project.com/downloads.html; https://github.com/cherokee/webserver/issues/1242; https://github.com/cherokee/webserver/releases
CVE: CVE-2020-12880
Published: 2020-07-27
Description: An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and can be retrieved. (The source code is otherwise inaccessible because the appliance has its hard disks encrypted, and no root shell is available during normal operation.)
CVSS Score: 5.5 (MEDIUM)
References: https://kb.pulsesecure.net/?atype=sa; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516; https://kb.pulsesecure.net/?atype=sa
CVE: CVE-2019-4731
Published: 2020-07-28
Description: IBM MQ Appliance 9.1.4.CD could allow a local attacker to obtain highly sensitive information by inclusion of sensitive data within trace. IBM X-Force ID: 172616.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172616; https://www.ibm.com/support/pages/node/1125885; https://exchange.xforce.ibmcloud.com/vulnerabilities/172616
CVE: CVE-2020-16088
Published: 2020-07-28
Description: iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://ftp.openbsd.org/pub/OpenBSD/patches/6.7/common/014_iked.patch.sig; https://github.com/openbsd/src/commit/7afb2d41c6d373cf965285840b85c[PII_REDACTED]5; https://github.com/xcllnt/openiked/commits/master
CVE: CVE-2020-4317
Published: 2020-07-28
Description: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177355.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177355; https://www.ibm.com/support/pages/node/6253295; https://exchange.xforce.ibmcloud.com/vulnerabilities/177355
CVE: CVE-2020-4318
Published: 2020-07-28
Description: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 177356.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177356; https://www.ibm.com/support/pages/node/6253297; https://exchange.xforce.ibmcloud.com/vulnerabilities/177356
CVE: CVE-2020-4319
Published: 2020-07-28
Description: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177402; https://www.ibm.com/support/pages/node/6252777; https://exchange.xforce.ibmcloud.com/vulnerabilities/177402
CVE: CVE-2020-4375
Published: 2020-07-28
Description: IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by an error creating a dynamic queue. IBM X-Force ID: 179080.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179080; https://www.ibm.com/support/pages/node/6252785; https://exchange.xforce.ibmcloud.com/vulnerabilities/179080
CVE: CVE-2020-4465
Published: 2020-07-28
Description: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS is vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attacker could overflow the buffer using an older client and cause a denial of service. IBM X-Force ID: 181562.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181562; https://www.ibm.com/support/pages/node/6252783; https://exchange.xforce.ibmcloud.com/vulnerabilities/181562
CVE: CVE-2020-15712
Published: 2020-07-28
Description: rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByPath.php script containing hexadecimal encoded "dot dot" sequences (%2f..%2f) in the path parameter to view arbitrary files on the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184938; https://www.rconfig.com/downloads/v3-release-notes; https://exchange.xforce.ibmcloud.com/vulnerabilities/184938
CVE: CVE-2020-15713
Published: 2020-07-28
Description: rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184939; https://www.rconfig.com/downloads/v3-release-notes; https://exchange.xforce.ibmcloud.com/vulnerabilities/184939
CVE: CVE-2020-15714
Published: 2020-07-28
Description: rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184940; https://www.rconfig.com/downloads/v3-release-notes; https://exchange.xforce.ibmcloud.com/vulnerabilities/184940
CVE: CVE-2020-15715
Published: 2020-07-28
Description: rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
CVSS Score: 9.9 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184941; https://www.rconfig.com/downloads/v3-release-notes; https://exchange.xforce.ibmcloud.com/vulnerabilities/184941
CVE: CVE-2020-13913
Published: 2020-07-28
Description: An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13914
Published: 2020-07-28
Description: webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the webserver via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 7.5 (HIGH)
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13915
Published: 2020-07-28
Description: Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-732
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13916
Published: 2020-07-28
Description: A stack buffer overflow in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute code via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13917
Published: 2020-07-28
Description: rkscli in Ruckus Wireless Unleashed through 200.7.10.92 allows a remote attacker to achieve command injection and jailbreak the CLI via a crafted CLI command. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13918
Published: 2020-07-28
Description: Incorrect access control in webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to leak system information (that can be used for a jailbreak) via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 7.5 (HIGH)
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-13919
Published: 2020-07-28
Description: emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to achieve command injection via a crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n, T301s, T310c, T310d, T310n, T310s, T610, T710, and T710s devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.ruckuswireless.com/security_bulletins/304; https://support.ruckuswireless.com/security_bulletins/304
CVE: CVE-2020-15408
Published: 2020-07-28
Description: An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite.
CVSS Score: 3.7 (LOW)
References: https://kb.pulsesecure.net/?atype=sa; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516; https://kb.pulsesecure.net/?atype=sa
CVE: CVE-2020-15863
Published: 2020-07-28
Description: hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html; http://www.openwall.com/lists/oss-security/2020/07/22/1; https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=5519724a13664b43e225ca05351c60b4468e4555
CVE: CVE-2020-15900
Published: 2020-07-28
Description: A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-787
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=log; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00006.html
CVE: CVE-2020-15420
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loader_ajax.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9259.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-737/; https://www.zerodayinitiative.com/advisories/ZDI-20-737/
CVE: CVE-2020-15421
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the check_ip parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9707.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-738/; https://www.zerodayinitiative.com/advisories/ZDI-20-738/
CVE: CVE-2020-15422
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the archivo parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9731.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-739/; https://www.zerodayinitiative.com/advisories/ZDI-20-739/
CVE: CVE-2020-15423
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the dominio parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9732.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-740/; https://www.zerodayinitiative.com/advisories/ZDI-20-740/
CVE: CVE-2020-15424
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. When parsing the domain parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9735.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-741/; https://www.zerodayinitiative.com/advisories/ZDI-20-741/
CVE: CVE-2020-15425
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_mod_security.php. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9742.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-742/; https://www.zerodayinitiative.com/advisories/ZDI-20-742/
CVE: CVE-2020-15426
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_migration_cpanel.php. When parsing the serverip parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9709.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-743/; https://www.zerodayinitiative.com/advisories/ZDI-20-743/
CVE: CVE-2020-15427
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_disk_usage.php. When parsing the folderName parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9713.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-744/; https://www.zerodayinitiative.com/advisories/ZDI-20-744/
CVE: CVE-2020-15428
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the line parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9714.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-745/; https://www.zerodayinitiative.com/advisories/ZDI-20-745/
CVE: CVE-2020-15429
Published: 2020-07-28
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajax_crons.php. When parsing the user parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9716.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-746/; https://www.zerodayinitiative.com/advisories/ZDI-20-746/