Lucene search
GitHub_MCVELIST:CVE-2020-5281HistoryMar 25, 2020 - 6:00 p.m.
CVE-2020-5281 LDAP connector injection in Perun
2020-03-2518:00:20
CWE-90
GitHub_M
www.cve.org
6.2 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
0.002 Low
EPSS
Percentile
52.2%
In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.
CNA Affected
[
{
"product": "perun",
"vendor": "CESNET",
"versions": [
{
"status": "affected",
"version": "< 3.9.1"
}
]
}
]Related
osv
osv
CVE-2020-5281
2020-03-25 18:15:14
cve
cve
CVE-2020-5281
2020-03-25 18:15:14
nvd
nvd
CVE-2020-5281
2020-03-25 18:15:14
prion
prion
Input validation
2020-03-25 18:15:00
6.2 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
0.002 Low
EPSS
Percentile
52.2%
Related for CVELIST:CVE-2020-5281