CVE-2020-8220 - Vulnerability Details

Vendors	Products
Ivanti	Connect Secure Policy Secure
Pulsesecure	Pulse Connect Secure Pulse Policy Secure

Link	Providers
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Pulse Connect Secure", "vendor": "n/a", "versions": [{"status": "affected", "version": "Fixed in 9.1R8"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "Denial of Service (CWE-400)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-07-30T12:53:02", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "ID": "CVE-2020-8220", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Pulse Connect Secure", "version": {"version_data": [{"version_value": "Fixed in 9.1R8"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial of Service (CWE-400)"}]}]}, "references": {"reference_data": [{"name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516", "refsource": "MISC", "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T09:56:27.763Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516"}]}]}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2020-8220", "datePublished": "2020-07-30T12:53:02", "dateReserved": "2020-01-28T00:00:00", "dateUpdated": "2024-08-04T09:56:27.763Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Pulse Connect Secure (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Fixed in 9.1R8 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-400 (string)

description : Denial of Service (CWE-400) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-07-30T12:53:02 (string)

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : support@hackerone.com (string)

ID : CVE-2020-8220 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Pulse Connect Secure (string)

version : { »

version_data : [ »

0 : { »

version_value : Fixed in 9.1R8 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (CWE-400) (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

refsource : MISC (string)

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T09:56:27.763Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

assignerShortName : hackerone (string)

cveId : CVE-2020-8220 (string)

datePublished : 2020-07-30T12:53:02 (string)

dateReserved : 2020-01-28T00:00:00 (string)

dateUpdated : 2024-08-04T09:56:27.763Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "4F450898-0B06-4073-9B76-BF22F68BD14F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*", "matchCriteriaId": "4B21C181-DC49-4EBD-9932-DBB337151FF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*", "matchCriteriaId": "4FEFC4B1-7350-46F9-80C1-42F5AE06142F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*", "matchCriteriaId": "DB7A6D62-6576-4713-9BF4-11068A72E8B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*", "matchCriteriaId": "843BC1B9-50CC-4F8F-A454-A0CEC6E92290", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*", "matchCriteriaId": "D5355372-03EA-46D7-9104-A2785C29B664", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*", "matchCriteriaId": "3DE32A0C-8944-4F51-A286-266055CA4B2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*", "matchCriteriaId": "0349A0CC-A372-4E51-899E-D7BA67876F4B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*", "matchCriteriaId": "93D1A098-BD77-4A7B-9070-A764FB435981", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*", "matchCriteriaId": "3CCC2D7B-F835-45EC-A316-2F0C5F2CF565", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*", "matchCriteriaId": "AD812596-C77C-4129-982F-C22A25B52126", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:*", "matchCriteriaId": "18272F7E-A9BA-4175-B6F6-F7E550D736CE", "versionEndIncluding": "9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*", "matchCriteriaId": "6418A649-3A63-40CC-BD7C-309B3B0B2595", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*", "matchCriteriaId": "A07B66E0-A679-4912-8CB1-CD134713EDC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*", "matchCriteriaId": "6D37A6E4-D58E-444D-AF6A-15461F38E81A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*", "matchCriteriaId": "FC2B9DA0-E32B-4125-9986-F0D3814C66E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*", "matchCriteriaId": "38A0D7CF-7D55-4933-AE8C-36006D6779E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*", "matchCriteriaId": "C9A5BA3E-D6B3-453D-8DDF-FF16859FD0F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*", "matchCriteriaId": "BAFDA618-D15D-401D-AC68-0020259FEC57", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*", "matchCriteriaId": "D55AB5F0-132F-4C40-BF4F-684E139B774B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*", "matchCriteriaId": "6BE937D2-8BEE-4E64-8738-F550EAD00F50", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*", "matchCriteriaId": "9C753520-1BC6-4980-AFC9-4C2FDDF2FD18", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*", "matchCriteriaId": "AC3863BC-3B9A-402B-A74A-149CDF717EC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:*", "matchCriteriaId": "B031D2AE-70BE-48BB-A9E9-0A0DAAAFF55F", "versionEndIncluding": "9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS."}, {"lang": "es", "value": "Se presenta una vulnerabilidad denegaci\u00f3n de servicio en Pulse Connect Secure versiones anteriores a 9.1R8, que permite a un atacante autenticado llevar a cabo una inyecci\u00f3n de comandos por medio de la web del administrador que puede causar una DOS"}], "id": "CVE-2020-8220", "lastModified": "2024-11-21T05:38:31.800", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 5.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-07-30T13:15:11.987", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "support@hackerone.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:* (string)

matchCriteriaId : 4F450898-0B06-4073-9B76-BF22F68BD14F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : 4B21C181-DC49-4EBD-9932-DBB337151FF7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : 4FEFC4B1-7350-46F9-80C1-42F5AE06142F (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:* (string)

matchCriteriaId : DB7A6D62-6576-4713-9BF4-11068A72E8B7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:* (string)

matchCriteriaId : 843BC1B9-50CC-4F8F-A454-A0CEC6E92290 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:* (string)

matchCriteriaId : D5355372-03EA-46D7-9104-A2785C29B664 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:* (string)

matchCriteriaId : 3DE32A0C-8944-4F51-A286-266055CA4B2F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:* (string)

matchCriteriaId : 0349A0CC-A372-4E51-899E-D7BA67876F4B (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:* (string)

matchCriteriaId : 93D1A098-BD77-4A7B-9070-A764FB435981 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:* (string)

matchCriteriaId : 3CCC2D7B-F835-45EC-A316-2F0C5F2CF565 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:* (string)

matchCriteriaId : AD812596-C77C-4129-982F-C22A25B52126 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_connect_secure:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 18272F7E-A9BA-4175-B6F6-F7E550D736CE (string)

versionEndIncluding : 9.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:* (string)

matchCriteriaId : 6418A649-3A63-40CC-BD7C-309B3B0B2595 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:* (string)

matchCriteriaId : A07B66E0-A679-4912-8CB1-CD134713EDC7 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:* (string)

matchCriteriaId : 6D37A6E4-D58E-444D-AF6A-15461F38E81A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:* (string)

matchCriteriaId : FC2B9DA0-E32B-4125-9986-F0D3814C66E9 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:* (string)

matchCriteriaId : 38A0D7CF-7D55-4933-AE8C-36006D6779E1 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:* (string)

matchCriteriaId : C9A5BA3E-D6B3-453D-8DDF-FF16859FD0F8 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:* (string)

matchCriteriaId : BAFDA618-D15D-401D-AC68-0020259FEC57 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:* (string)

matchCriteriaId : D55AB5F0-132F-4C40-BF4F-684E139B774B (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:* (string)

matchCriteriaId : 6BE937D2-8BEE-4E64-8738-F550EAD00F50 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:* (string)

matchCriteriaId : 9C753520-1BC6-4980-AFC9-4C2FDDF2FD18 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:* (string)

matchCriteriaId : AC3863BC-3B9A-402B-A74A-149CDF717EC6 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:pulsesecure:pulse_policy_secure:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B031D2AE-70BE-48BB-A9E9-0A0DAAAFF55F (string)

versionEndIncluding : 9.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A denial of service vulnerability exists in Pulse Connect Secure <9.1R8 that allows an authenticated attacker to perform command injection via the administrator web which can cause DOS. (string)

}

1 : { »

lang : es (string)

value : Se presenta una vulnerabilidad denegación de servicio en Pulse Connect Secure versiones anteriores a 9.1R8, que permite a un atacante autenticado llevar a cabo una inyección de comandos por medio de la web del administrador que puede causar una DOS (string)

}

]

id : CVE-2020-8220 (string)

lastModified : 2024-11-21T05:38:31.800 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5.5 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:S/C:N/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 4.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.2 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-07-30T13:15:11.987 (string)

references : [ »

0 : { »

source : support@hackerone.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (string)

}

]

sourceIdentifier : support@hackerone.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-400 (string)

}

]

source : support@hackerone.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-400 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object