Lucene search

K
cvelistVulDBCVELIST:CVE-2017-20012
HistoryMar 28, 2022 - 8:45 p.m.

CVE-2017-20012 WEKA INTEREST Security Scanner Stresstest Scheme denial of service

2022-03-2820:45:54
CWE-404
VulDB
www.cve.org
2
cve-2017-20012; weka interest security scanner; stresstest scheme handler; denial of service; local attack; no longer supported

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

5.5

Confidence

High

EPSS

0

Percentile

13.2%

A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CNA Affected

[
  {
    "product": "INTEREST Security Scanner",
    "vendor": "WEKA",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      },
      {
        "status": "affected",
        "version": "1.1"
      },
      {
        "status": "affected",
        "version": "1.2"
      },
      {
        "status": "affected",
        "version": "1.3"
      },
      {
        "status": "affected",
        "version": "1.4"
      },
      {
        "status": "affected",
        "version": "1.5"
      },
      {
        "status": "affected",
        "version": "1.6"
      },
      {
        "status": "affected",
        "version": "1.7"
      },
      {
        "status": "affected",
        "version": "1.8"
      }
    ]
  }
]

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

AI Score

5.5

Confidence

High

EPSS

0

Percentile

13.2%

Related for CVELIST:CVE-2017-20012