CVE-2020-2077 Vulnerability Details

  /     /     /  

CVE-2020-2077 Metadata Quick Info

CVE Published: 29/07/2020 | CVE Updated: 04/08/2024 | CVE Year: 2020
Source: SICK AG | Vendor: n/a | Product: SICK Package Analytics
Status : PUBLISHED

---

CVE-2020-2077 Description

SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Incorrect Default Permissions
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).