CVE-2020-7198 - Vulnerability Details

Vendors	Products
Hp	Oneview Synergy Composer Synergy Composer 2

Link	Providers
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "HP OneView; HPE Synergy Composer; HPE Synergy Composer 2", "vendor": "n/a", "versions": [{"status": "affected", "version": "5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4"}]}], "descriptions": [{"lang": "en", "value": "There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2."}], "problemTypes": [{"descriptions": [{"description": "remote escalation of privilege", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-06T14:14:04", "orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-alert@hpe.com", "ID": "CVE-2020-7198", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HP OneView; HPE Synergy Composer; HPE Synergy Composer 2", "version": {"version_data": [{"version_value": "5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4"}, {"version_value": "5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4"}, {"version_value": "5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "remote escalation of privilege"}]}]}, "references": {"reference_data": [{"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us", "refsource": "MISC", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T09:25:48.555Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us"}]}]}, "cveMetadata": {"assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "assignerShortName": "hpe", "cveId": "CVE-2020-7198", "datePublished": "2020-11-06T14:14:04", "dateReserved": "2020-01-16T00:00:00", "dateUpdated": "2024-08-04T09:25:48.555Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : HP OneView; HPE Synergy Composer; HPE Synergy Composer 2 (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : remote escalation of privilege (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-11-06T14:14:04 (string)

orgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

shortName : hpe (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security-alert@hpe.com (string)

ID : CVE-2020-7198 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : HP OneView; HPE Synergy Composer; HPE Synergy Composer 2 (string)

version : { »

version_data : [ »

0 : { »

version_value : 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 (string)

}

1 : { »

version_value : 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 (string)

}

2 : { »

version_value : 5.0, 5.00.01, 5.00.02, 5.2, 5.20.01, 5.3, 5.4 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : remote escalation of privilege (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

refsource : MISC (string)

url : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T09:25:48.555Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : eb103674-0d28-4225-80f8-39fb86215de0 (string)

assignerShortName : hpe (string)

cveId : CVE-2020-7198 (string)

datePublished : 2020-11-06T14:14:04 (string)

dateReserved : 2020-01-16T00:00:00 (string)

dateUpdated : 2024-08-04T09:25:48.555Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:oneview:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "7B43798D-E077-4DCC-B360-495F3260566B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.00.01:*:*:*:*:*:*:*", "matchCriteriaId": "413D7888-B5F5-41D3-BBD8-E3821ED5AF03", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.00.02:*:*:*:*:*:*:*", "matchCriteriaId": "57CA44FC-88D3-434C-AAF4-29B77946CE46", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "0C164845-25B5-4492-BBCC-4504D5B7EF98", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "7FF30AB6-5577-4E02-86DD-8A4B984C0254", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "865F4A84-7508-420C-BEBC-E4BD0324660E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:oneview:5.20.01:*:*:*:*:*:*:*", "matchCriteriaId": "A9FF0533-884C-45FB-9DBF-4F77C487347A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "C1E24806-A07A-4853-B37E-368A4369C00E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.00.01:*:*:*:*:*:*:*", "matchCriteriaId": "E5B6C01F-58F2-4AB7-87F1-4775772EC228", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.00.02:*:*:*:*:*:*:*", "matchCriteriaId": "C0D75A78-597D-4869-AF93-A7713EA3FC55", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "31B4B2A0-1049-4EA8-8201-CFDE0299CC46", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "8F2F7A90-DBF6-494B-B5C7-A8FDCF963E0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "218EB5A1-5577-4779-88AC-48D11E202E6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer:5.20.01:*:*:*:*:*:*:*", "matchCriteriaId": "2725D03B-CE0C-4257-9ADC-12A3B8132BC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "86502D50-9271-4E97-AED8-B9F2D408A544", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.00.01:*:*:*:*:*:*:*", "matchCriteriaId": "269EA18C-C73B-42A4-926D-41D8E891859A", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.00.02:*:*:*:*:*:*:*", "matchCriteriaId": "0D446953-7DE9-4B44-A3BD-E7F37A42203F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "2889CE0D-6C92-4D9D-82E4-5F787A81498F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "F8BDAE9F-F232-420E-8C9B-DF7749C2F80F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "E4407C0B-E515-4094-A014-60F933C6A95F", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:synergy_composer_2:5.20.01:*:*:*:*:*:*:*", "matchCriteriaId": "3114FF14-591B-4B58-AC55-98E06E7BE813", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2."}, {"lang": "es", "value": "Se presenta una posible escalada de privilegios remota para un usuario malicioso que posee una cuenta de OneView en OneView y Synergy Composer.&#xa0;HPE ha proporcionado actualizaciones para Oneview y Synergy Composer: Actualice a la versi\u00f3n 5.5 de OneView, Composer o Composer2"}], "id": "CVE-2020-7198", "lastModified": "2024-11-21T05:36:48.797", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-11-06T15:15:12.097", "references": [{"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hp:oneview:5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B43798D-E077-4DCC-B360-495F3260566B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hp:oneview:5.00.01:*:*:*:*:*:*:* (string)

matchCriteriaId : 413D7888-B5F5-41D3-BBD8-E3821ED5AF03 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hp:oneview:5.00.02:*:*:*:*:*:*:* (string)

matchCriteriaId : 57CA44FC-88D3-434C-AAF4-29B77946CE46 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hp:oneview:5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 0C164845-25B5-4492-BBCC-4504D5B7EF98 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hp:oneview:5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FF30AB6-5577-4E02-86DD-8A4B984C0254 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hp:oneview:5.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 865F4A84-7508-420C-BEBC-E4BD0324660E (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:hp:oneview:5.20.01:*:*:*:*:*:*:* (string)

matchCriteriaId : A9FF0533-884C-45FB-9DBF-4F77C487347A (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C1E24806-A07A-4853-B37E-368A4369C00E (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.00.01:*:*:*:*:*:*:* (string)

matchCriteriaId : E5B6C01F-58F2-4AB7-87F1-4775772EC228 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.00.02:*:*:*:*:*:*:* (string)

matchCriteriaId : C0D75A78-597D-4869-AF93-A7713EA3FC55 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 31B4B2A0-1049-4EA8-8201-CFDE0299CC46 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 8F2F7A90-DBF6-494B-B5C7-A8FDCF963E0B (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 218EB5A1-5577-4779-88AC-48D11E202E6F (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:hp:synergy_composer:5.20.01:*:*:*:*:*:*:* (string)

matchCriteriaId : 2725D03B-CE0C-4257-9ADC-12A3B8132BC4 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 86502D50-9271-4E97-AED8-B9F2D408A544 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.00.01:*:*:*:*:*:*:* (string)

matchCriteriaId : 269EA18C-C73B-42A4-926D-41D8E891859A (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.00.02:*:*:*:*:*:*:* (string)

matchCriteriaId : 0D446953-7DE9-4B44-A3BD-E7F37A42203F (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 2889CE0D-6C92-4D9D-82E4-5F787A81498F (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : F8BDAE9F-F232-420E-8C9B-DF7749C2F80F (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.4:*:*:*:*:*:*:* (string)

matchCriteriaId : E4407C0B-E515-4094-A014-60F933C6A95F (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:hp:synergy_composer_2:5.20.01:*:*:*:*:*:*:* (string)

matchCriteriaId : 3114FF14-591B-4B58-AC55-98E06E7BE813 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2. (string)

}

1 : { »

lang : es (string)

value : Se presenta una posible escalada de privilegios remota para un usuario malicioso que posee una cuenta de OneView en OneView y Synergy Composer. HPE ha proporcionado actualizaciones para Oneview y Synergy Composer: Actualice a la versión 5.5 de OneView, Composer o Composer2 (string)

}

]

id : CVE-2020-7198 (string)

lastModified : 2024-11-21T05:36:48.797 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:S/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-11-06T15:15:12.097 (string)

references : [ »

0 : { »

source : security-alert@hpe.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04047en_us (string)

}

]

sourceIdentifier : security-alert@hpe.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object