deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-11579
Published: 2020-09-03
Description: An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/ShielderSec/CVE-2020-11579; https://shielder.it/; https://www.phpkb.com
CVE: CVE-2020-14373
Published: 2020-09-03
Description: A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugs.ghostscript.com/show_bug.cgi?id=702851; https://bugzilla.redhat.com/show_bug.cgi?id=1873239; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=ece5cbbd9979cd35737b00e68267762d72feb2ea%3Bhp=1ef5f08f2c2e27efa978f0010669ff22355c385f
CVE: CVE-2020-24193
Published: 2020-09-03
Description: A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://sourcecodetester.com; https://www.exploit-db.com/exploits/48787; http://sourcecodetester.com
CVE: CVE-2020-25115
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25116
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25117
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25118
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25119
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25120
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25121
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25122
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25123
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25124
Published: 2020-09-03
Description: The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html; https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html
CVE: CVE-2020-25125
Published: 2020-09-03
Description: GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2020/09/03/4; http://www.openwall.com/lists/oss-security/2020/09/03/5; https://bugzilla.opensuse.org/show_bug.cgi?id=1176034
CVE: CVE-2020-9199
Published: 2020-09-03
Description: B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-01-command-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-01-command-en
CVE: CVE-2020-9083
Published: 2020-09-03
Description: HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service.
CVSS Score: 2.4 (LOW)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-03-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-03-smartphone-en
CVE: CVE-2020-9235
Published: 2020-09-03
Description: Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-07-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-07-smartphone-en
CVE: CVE-2019-11928
Published: 2020-09-03
Description: An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1886
Published: 2020-09-03
Description: A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120, CWE-787
References: https://www.whatsapp.com/security/advisories/2020; https://www.whatsapp.com/security/advisories/2020
CVE: CVE-2020-1889
Published: 2020-09-03
Description: A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-265
References: https://www.whatsapp.com/security/advisories/2020/; https://www.whatsapp.com/security/advisories/2020/
CVE: CVE-2020-1890
Published: 2020-09-03
Description: A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.whatsapp.com/security/advisories/2020; https://www.whatsapp.com/security/advisories/2020
CVE: CVE-2020-1891
Published: 2020-09-03
Description: A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.whatsapp.com/security/advisories/2020; https://www.whatsapp.com/security/advisories/2020
CVE: CVE-2020-1894
Published: 2020-09-03
Description: A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.whatsapp.com/security/advisories/2020; https://www.whatsapp.com/security/advisories/2020
CVE: CVE-2020-25004
Published: 2020-09-03
Description: Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/; https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/; https://www.exploit-db.com/
CVE: CVE-2020-25005
Published: 2020-09-03
Description: Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/; https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/; https://www.exploit-db.com/
CVE: CVE-2020-25006
Published: 2020-09-03
Description: Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/; https://www.jazzsec.com/2020/08/27/heybbs-has-three-file-sql-injection-vulnerabilities/; https://www.exploit-db.com/
CVE: CVE-2020-24996
Published: 2020-09-03
Description: There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42028; https://forum.xpdfreader.com/viewtopic.php?f=3&t=42028
CVE: CVE-2020-24999
Published: 2020-09-03
Description: There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=42029; https://forum.xpdfreader.com/viewtopic.php?f=3&t=42029
CVE: CVE-2020-24977
Published: 2020-09-04
Description: GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00061.html; https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2
CVE: CVE-2020-24978
Published: 2020-09-04
Description: In NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392712; https://bugzilla.nasm.us/show_bug.cgi?id=3392712
CVE: CVE-2020-24979
Published: 2020-09-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-24980
Published: 2020-09-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-24940
Published: 2020-09-04
Description: An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://blog.laravel.com/security-release-laravel-61834-7232; https://blog.laravel.com/security-release-laravel-61834-7232
CVE: CVE-2020-24941
Published: 2020-09-04
Description: An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://blog.laravel.com/security-release-laravel-61835-7240; https://blog.laravel.com/security-release-laravel-61835-7240
CVE: CVE-2020-1911
Published: 2020-09-04
Description: A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843, CWE-843
References: https://github.com/facebook/hermes/commit/fe52854cdf6725c2eaa9e125995da76e6ceb27da; https://www.facebook.com/security/advisories/cve-2020-1911; https://github.com/facebook/hermes/commit/fe52854cdf6725c2eaa9e125995da76e6ceb27da
CVE: CVE-2020-3365
Published: 2020-09-04
Description: A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited set of restricted directories. The vulnerability is due to a flaw in the logic that governs directory permissions. An attacker could exploit this vulnerability by using capabilities that are not controlled by the role-based access control (RBAC) mechanisms of the software. A successful exploit could allow the attacker to overwrite files on an affected device.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-path-emy79OC2; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-path-emy79OC2
CVE: CVE-2020-3430
Published: 2020-09-04
Description: A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this vulnerability by convincing a user to click a link within a message sent by email or other messaging platform. A successful exploit could allow the attacker to execute arbitrary commands on a targeted system with the privileges of the user account that is running the Cisco Jabber client software.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-vY8M4KGB; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-vY8M4KGB
CVE: CVE-2020-3451
Published: 2020-09-04
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-119, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv; https://www.zerodayinitiative.com/advisories/ZDI-20-1100/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
CVE: CVE-2020-3453
Published: 2020-09-04
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-119, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv; https://www.zerodayinitiative.com/advisories/ZDI-20-1101/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
CVE: CVE-2020-3473
Published: 2020-09-04
Description: A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group&ndash;based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-863
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-LJtNFjeN; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-LJtNFjeN
CVE: CVE-2020-3478
Published: 2020-09-04
Description: A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-file-overwrite-UONzPMkr; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-file-overwrite-UONzPMkr
CVE: CVE-2020-3495
Published: 2020-09-04
Description: A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages to the affected software. A successful exploit could allow the attacker to cause the application to execute arbitrary programs on the targeted system with the privileges of the user account that is running the Cisco Jabber client software, possibly resulting in arbitrary code execution.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-UyTKCPGg; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-UyTKCPGg
CVE: CVE-2020-3498
Published: 2020-09-04
Description: A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An attacker could exploit this vulnerability by sending specially crafted messages to a targeted system. A successful exploit could allow the attacker to cause the application to return sensitive authentication information to another system, possibly for use in further attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ttcgB9R3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ttcgB9R3
CVE: CVE-2020-3530
Published: 2020-09-04
Description: A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The vulnerability is due to incorrect mapping in the source code of task group assignments for a specific command. An attacker could exploit this vulnerability by issuing the command, which they should not be authorized to issue, on an affected device. A successful exploit could allow the attacker to invalidate the integrity of the disk and cause the device to restart. This vulnerability could allow a user with read permissions to issue a specific command that should require Administrator privileges.
CVSS Score: 8.4 (HIGH)
CWE: CWE-264, CWE-863
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-cli-privescl-sDVEmhqv; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-cli-privescl-sDVEmhqv