Lucene search

MitreCVE-2020-22623

HistoryJul 27, 2023 - 8:15 p.m.

CVE-2020-22623

2023-07-2720:15:09

CWE-22

mitre

web.nvd.nist.gov

cve

2020

22623

directory traversal

vulnerability

jinfornet

jreport 15.6

unauthenticated

attackers

sensitive information

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

55.0%

JSON

Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive information.

Affected configurations

Nvd

Node

insightsoftwarejreportMatch15.6

VendorProductVersionCPE
insightsoftwarejreport15.6cpe:2.3:a:insightsoftware:jreport:15.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
insightsoftware	jreport	15.6	cpe:2.3:a:insightsoftware:jreport:15.6:::::::*

References

jinfornet.com

jreport.com

medium.com/%40nguyenhongphu/cve-2020-22623-jinfornet-jreport-unauthenticated-path-traversal-arbitrary-file-download-83224cef32c8

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

55.0%

JSON

Related for CVE-2020-22623