Lucene search

K
cveFedoraCVE-2020-15853
HistoryOct 18, 2022 - 2:15 p.m.

CVE-2020-15853

2022-10-1814:15:09
CWE-400
fedora
web.nvd.nist.gov
23
20
cve-2020-15853
supybot-fedora
refresh command
zodbot
unresponsiveness
nvd

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

34.4%

supybot-fedora implements the command ‘refresh’, that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time.

Affected configurations

Nvd
Node
fedoraprojectsupybot-fedoraMatch-
VendorProductVersionCPE
fedoraprojectsupybot-fedora-cpe:2.3:a:fedoraproject:supybot-fedora:-:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "supybot-fedora",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]

Social References

More

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

34.4%

Related for CVE-2020-15853