Lucene search
JpcertCVELIST:CVE-2020-5632HistoryOct 06, 2020 - 5:00 a.m.
CVE-2020-5632
2020-10-0605:00:27
jpcert
www.cve.org
4
infocage
siteshell
iis
apache
vulnerability
access restriction bypass
arbitrary code execution
elevated privilege
EPSS
0
Percentile
12.6%
InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1) allow authenticated attackers to bypass access restriction and to execute arbitrary code with an elevated privilege via a specially crafted executable files.
CNA Affected
[
{
"product": "InfoCage SiteShell series",
"vendor": "NEC Corporation",
"versions": [
{
"status": "affected",
"version": "Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1, Host type SiteShell for Apache Windows V1.4, V1.5, and V1.6, and Host type SiteShell for Apache Windows prior to revision V2.0.0.6, V2.1.0.7, V2.1.1.6, V3.0.0.11, V4.0.0.6, V4.1.0.5, and V4.2.0.1"
}
]
}
]Related
jvn
jvn
cve
cve
CVE-2020-5632
2020-10-06 06:15:12
prion
prion
Design/Logic Flaw
2020-10-06 06:15:00
nvd
nvd
CVE-2020-5632
2020-10-06 06:15:12