Логотип exploitDog
bind:CVE-2020-3478
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-3478

Количество 3

Количество 3

nvd логотип

CVE-2020-3478

больше 5 лет назад

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.

CVSS3: 8.1
EPSS: Низкий
github логотип

GHSA-pj8h-h42m-ghq2

больше 3 лет назад

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.

EPSS: Низкий
fstec логотип

BDU:2020-04206

больше 5 лет назад

Уязвимость интерфейса REST API программного обеспечения инфраструктуры Cisco Enterprise NFV Infrastructure Software (NFVIS), связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю перезаписать произвольные файлы в операционной системе уязвимого устройства

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-3478

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.

CVSS3: 8.1
1%
Низкий
больше 5 лет назад
github логотип
GHSA-pj8h-h42m-ghq2

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit this vulnerability by uploading a file using the REST API. A successful exploit could allow an attacker to overwrite and upload files, which could degrade the functionality of the affected system.

1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2020-04206

Уязвимость интерфейса REST API программного обеспечения инфраструктуры Cisco Enterprise NFV Infrastructure Software (NFVIS), связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю перезаписать произвольные файлы в операционной системе уязвимого устройства

CVSS3: 8.1
1%
Низкий
больше 5 лет назад

Уязвимостей на страницу