CVE Listesine Dön
CVE-2020-1147 CISA KEV · Aktif Sömürülüyor

dotnet: XML source markup processing remote code execution

CVSS Skor

8.8

EPSS İhtimal

%94.0

Risk Skoru

16.5

Yayın

6 yıl önce

Overview (Genel Bakış)Public Exploits (2)Newsroom (Haberler)Vulnerability Timeline
Resmî yama doğrulandı

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2020-1147 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core application.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2020-1147 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src İncele
2Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 İncele
3Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src İncele
4Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 İncele
5Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 İncele
6Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 İncele
7Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 İncele
8Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 İncele
9Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 İncele
10Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 İncele
11Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
12Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
13Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src İncele
14Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 İncele
15Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
16Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 İncele
17Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 İncele
18Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 İncele
19Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
20Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 İncele
21Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
22Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 İncele
23Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 İncele
24Red Hat7Server-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src İncele
25Red Hat7Server-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 İncele
26Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src İncele
27Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 İncele
28Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 İncele
29Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 İncele
30Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 İncele
31Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 İncele
32Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 İncele
33Red Hat7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 İncele
34Red Hat7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
35Red Hat7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
36Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src İncele
37Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 İncele
38Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
39Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 İncele
40Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 İncele
41Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 İncele
42Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
43Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 İncele
44Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
45Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 İncele
46Red Hat7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 İncele
47Red Hat7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src İncele
48Red Hat7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 İncele
49Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src İncele
50Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 İncele
51Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 İncele
52Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 İncele
53Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 İncele
54Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 İncele
55Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 İncele
56Red Hat7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 İncele
57Red Hat7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
58Red Hat7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
59Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src İncele
60Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 İncele
61Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
62Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 İncele
63Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 İncele
64Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 İncele
65Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 İncele
66Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 İncele
67Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 İncele
68Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 İncele
69Red Hat7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 İncele
70Red HatAppStream-8.0.0.Z.E4S:dotnet-0:2.1.516-1.el8_0.src İncele
71Red HatAppStream-8.0.0.Z.E4S:dotnet-0:2.1.516-1.el8_0.x86_64 İncele
72Red HatAppStream-8.0.0.Z.E4S:dotnet-debuginfo-0:2.1.516-1.el8_0.x86_64 İncele
73Red HatAppStream-8.0.0.Z.E4S:dotnet-debugsource-0:2.1.516-1.el8_0.x86_64 İncele
74Red HatAppStream-8.0.0.Z.E4S:dotnet-host-0:2.1.20-1.el8_0.x86_64 İncele
75Red HatAppStream-8.0.0.Z.E4S:dotnet-host-debuginfo-0:2.1.20-1.el8_0.x86_64 İncele
76Red HatAppStream-8.0.0.Z.E4S:dotnet-host-fxr-2.1-0:2.1.20-1.el8_0.x86_64 İncele
77Red HatAppStream-8.0.0.Z.E4S:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_0.x86_64 İncele
78Red HatAppStream-8.0.0.Z.E4S:dotnet-runtime-2.1-0:2.1.20-1.el8_0.x86_64 İncele
79Red HatAppStream-8.0.0.Z.E4S:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_0.x86_64 İncele
80Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1-0:2.1.516-1.el8_0.x86_64 İncele
81Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_0.x86_64 İncele
82Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_0.x86_64 İncele
83Red HatAppStream-8.1.0.Z.EUS:dotnet-0:2.1.516-1.el8_1.src İncele
84Red HatAppStream-8.1.0.Z.EUS:dotnet-debuginfo-0:2.1.516-1.el8_1.x86_64 İncele
85Red HatAppStream-8.1.0.Z.EUS:dotnet-debugsource-0:2.1.516-1.el8_1.x86_64 İncele
86Red HatAppStream-8.1.0.Z.EUS:dotnet-host-fxr-2.1-0:2.1.20-1.el8_1.x86_64 İncele
87Red HatAppStream-8.1.0.Z.EUS:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_1.x86_64 İncele
88Red HatAppStream-8.1.0.Z.EUS:dotnet-runtime-2.1-0:2.1.20-1.el8_1.x86_64 İncele
89Red HatAppStream-8.1.0.Z.EUS:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_1.x86_64 İncele
90Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1-0:2.1.516-1.el8_1.x86_64 İncele
91Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_1.x86_64 İncele
92Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_1.x86_64 İncele
93Red HatAppStream-8.2.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.6-1.el8_2.x86_64 İncele
94Red HatAppStream-8.2.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 İncele
95Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-0:2.1.516-1.el8_2.src İncele
96Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-0:3.1.106-1.el8_2.x86_64 İncele
97Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.6-1.el8_2.x86_64 İncele
98Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 İncele
99Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-debuginfo-0:2.1.516-1.el8_2.x86_64 İncele
100Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-debugsource-0:2.1.516-1.el8_2.x86_64 İncele
101Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-0:3.1.6-1.el8_2.x86_64 İncele
102Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:3.1.6-1.el8_2.x86_64 İncele
103Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-fxr-2.1-0:2.1.20-1.el8_2.x86_64 İncele
104Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_2.x86_64 İncele
105Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.6-1.el8_2.x86_64 İncele
106Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 İncele
107Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-2.1-0:2.1.20-1.el8_2.x86_64 İncele
108Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_2.x86_64 İncele
109Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.6-1.el8_2.x86_64 İncele
110Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 İncele
111Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1-0:2.1.516-1.el8_2.x86_64 İncele
112Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_2.x86_64 İncele
113Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_2.x86_64 İncele
114Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.106-1.el8_2.x86_64 İncele
115Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 İncele
116Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 İncele
117Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.106-1.el8_2.x86_64 İncele
118Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-0:3.1.106-1.el8_2.src İncele
119Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 İncele
120Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.106-1.el8_2.x86_64 İncele
121Red HatAppStream-8.2.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:3.1.106-1.el8_2.x86_64 İncele
122microsoft.NET Framework, SharePoint, Visual Studio İncele
Total Affected Vendor: 2|Products: 122

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Düzeltme yayımlandı

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat düzeltmeleri

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.8cvss_v3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama doğrulandı

12 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

CVE-2020-1147 için veritabanında 2 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-1147 is associated with the following CWEs:

CWE-502: Deserialization of Untrusted Data

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-1147 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekiyor

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#1856929vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2020-1147vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2020-1147vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patch

CVSS Vektör Radar Grafiği

8.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.RequiredConfidentialityLowIntegrityHighAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User Interaction—
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)High (Yüksek)
Availability (Erişilebilirlik)High (Yüksek)

Yama doğrulandı

12 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Üreticiyi takip et

RH
Red Hat logo
Red Hat
M
microsoft logo
microsoft

Zafiyet Türü (CWE & CAPEC)

CWE-502

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-1147"