Lucene search

JpcertCVE-2020-5617

HistoryAug 04, 2020 - 2:15 a.m.

CVE-2020-5617

2020-08-0402:15:11

CWE-269

jpcert

web.nvd.nist.gov

cve-2020-5617

skysea client view

privilege escalation

unauthorized privileges

sensitive information

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unspecified vectors.

Affected configurations

Nvd

Vulners

Node

skygroupskysea_client_viewRange12.200.12n–15.210.05f

VendorProductVersionCPE
skygroupskysea_client_view*cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
skygroup	skysea_client_view	*	cpe:2.3:a:skygroup:skysea_client_view::::::::

CNA Affected

[
  {
    "product": "SKYSEA Client View",
    "vendor": "Sky Co., LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.12.200.12n to 15.210.05f"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN25422698/index.html

www.skyseaclientview.net/news/200803_01/

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-5617