mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-01 03:01:36 +00:00
233 lines
9.2 KiB
JSON
233 lines
9.2 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2020-5632",
|
||
|
|
"sourceIdentifier": "vultures@jpcert.or.jp",
|
||
|
|
"published": "2020-10-06T06:15:12.590",
|
||
|
|
"lastModified": "2020-10-22T19:04:40.097",
|
||
|
|
"vulnStatus": "Analyzed",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "Serie InfoCage SiteShell (Host type SiteShell para IIS V1.4, V1.5 y V1.6, tipo de Host SiteShell para IIS versiones anteriores a V2.0.0.6, V2.1.0.7, V2.1.1.6, V3. 0.0.11, V4.0.0.6, V4.1.0.5 y V4.2.0.1, tipo de host SiteShell para Apache Windows V1.4, V1.5 y V1.6, y tipo de host SiteShell para Apache Windows anterior a revisi\u00f3n V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5 y V4.2.0.1), permiten a atacantes autenticados omitir una restricci\u00f3n de acceso y ejecutar c\u00f3digo arbitrario con un privilegio elevado por medio de archivos ejecutables especialmente dise\u00f1ados"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV31": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.1",
|
||
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||
|
|
"attackVector": "LOCAL",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "LOW",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "HIGH",
|
||
|
|
"integrityImpact": "HIGH",
|
||
|
|
"availabilityImpact": "HIGH",
|
||
|
|
"baseScore": 7.8,
|
||
|
|
"baseSeverity": "HIGH"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 1.8,
|
||
|
|
"impactScore": 5.9
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
|
||
|
|
"accessVector": "LOCAL",
|
||
|
|
"accessComplexity": "LOW",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "COMPLETE",
|
||
|
|
"integrityImpact": "COMPLETE",
|
||
|
|
"availabilityImpact": "COMPLETE",
|
||
|
|
"baseScore": 7.2
|
||
|
|
},
|
||
|
|
"baseSeverity": "HIGH",
|
||
|
|
"exploitabilityScore": 3.9,
|
||
|
|
"impactScore": 10.0,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": false
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "NVD-CWE-noinfo"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionEndExcluding": "2.0.0.6",
|
||
|
|
"matchCriteriaId": "1102AE7F-8BAD-46EE-A63B-CD3A6F76AEF2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "2.0.0.0",
|
||
|
|
"versionEndExcluding": "2.0.0.6",
|
||
|
|
"matchCriteriaId": "AB44835D-644F-48E7-B470-C8BDAAAA1400"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "2.1.0.0",
|
||
|
|
"versionEndExcluding": "2.1.0.7",
|
||
|
|
"matchCriteriaId": "943B17B1-83F1-409E-B240-5244C4BD1FA4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "2.1.0.0",
|
||
|
|
"versionEndExcluding": "2.1.0.7",
|
||
|
|
"matchCriteriaId": "243A65F2-0E6F-42F2-9BB1-8BDA62360210"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "2.1.1.0",
|
||
|
|
"versionEndExcluding": "2.1.1.6",
|
||
|
|
"matchCriteriaId": "88AFF309-FA58-4A56-B298-8B6D10D572B6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "2.1.1.0",
|
||
|
|
"versionEndExcluding": "2.1.1.6",
|
||
|
|
"matchCriteriaId": "2DE19748-10F6-4F43-89DF-1BF0D67ADF60"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "3.0.0.0",
|
||
|
|
"versionEndExcluding": "3.0.0.11",
|
||
|
|
"matchCriteriaId": "78D1AD15-007A-4072-8314-F027EE77EC60"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "3.0.0.0",
|
||
|
|
"versionEndExcluding": "3.0.0.11",
|
||
|
|
"matchCriteriaId": "499B8143-FB63-43BA-8CAE-DDA2EA156B17"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "4.0.0.0",
|
||
|
|
"versionEndExcluding": "4.0.0.6",
|
||
|
|
"matchCriteriaId": "E14AE3AD-CDAB-410E-A0BC-D6C02577645E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "4.0.0.0",
|
||
|
|
"versionEndExcluding": "4.0.0.6",
|
||
|
|
"matchCriteriaId": "53B2AD2C-7A4F-4269-856E-4A0EC13B4D82"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "4.1.0.0",
|
||
|
|
"versionEndExcluding": "4.1.0.5",
|
||
|
|
"matchCriteriaId": "F511AC4B-A4A3-4CA9-961B-B176807D8740"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "4.1.0.0",
|
||
|
|
"versionEndExcluding": "4.1.0.5",
|
||
|
|
"matchCriteriaId": "9D0CF31F-FADA-4676-88E3-D3F0FD604696"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:apache_windows:*:*",
|
||
|
|
"versionStartIncluding": "4.2.0.0",
|
||
|
|
"versionEndExcluding": "4.2.0.1",
|
||
|
|
"matchCriteriaId": "54135531-1626-4A9A-821E-EB42D969A56A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:*:*:*:*:*:iis:*:*",
|
||
|
|
"versionStartIncluding": "4.2.0.0",
|
||
|
|
"versionEndExcluding": "4.2.0.1",
|
||
|
|
"matchCriteriaId": "77D31629-16BB-4ED7-9030-131B03508FFB"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.4:*:*:*:*:apache_windows:*:*",
|
||
|
|
"matchCriteriaId": "310372EF-3CD0-4482-B749-35DB81E49889"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.4:*:*:*:*:iis:*:*",
|
||
|
|
"matchCriteriaId": "3D29154E-D3E5-4259-BB87-60DF549316D7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.5:*:*:*:*:apache_windows:*:*",
|
||
|
|
"matchCriteriaId": "52D24DA5-451B-4155-A05C-895B7E291DAB"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.5:*:*:*:*:iis:*:*",
|
||
|
|
"matchCriteriaId": "E26E05E8-8098-42C5-82E8-57031EA862B6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.6:*:*:*:*:apache_windows:*:*",
|
||
|
|
"matchCriteriaId": "5ED5F3A2-2680-4BC0-B02D-448225FF4344"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:nec:infocage_siteshell:1.6:*:*:*:*:iis:*:*",
|
||
|
|
"matchCriteriaId": "DD7C274C-2FE3-43D9-8D8D-DE0D72F67771"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "https://jpn.nec.com/infocage/siteshell/everyone_20200918.html",
|
||
|
|
"source": "vultures@jpcert.or.jp",
|
||
|
|
"tags": [
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://jvn.jp/en/jp/JVN07426151/index.html",
|
||
|
|
"source": "vultures@jpcert.or.jp",
|
||
|
|
"tags": [
|
||
|
|
"Third Party Advisory"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|