CVE-2020-7008 Vulnerability Details

  /     /     /  

CVE-2020-7008 Metadata Quick Info

CVE Published: 03/04/2020 | CVE Updated: 04/08/2024 | CVE Year: 2020
Source: icscert | Vendor: VISAM | Product: VBASE Editor
Status : PUBLISHED

---

CVE-2020-7008 Description

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-23
CWE Name: RELATIVE PATH TRAVERSAL CWE-23
Source: VISAM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).