Lucene search
HistoryAug 21, 2024 - 2:15 p.m.
CVE-2020-11847
cve-2020-11847
pam server
system access
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.2%
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1.
Affected configurations
Node
microfocusnetiq_privileged_access_managerRange<3.7
ORmicrofocusnetiq_privileged_access_managerMatch3.7-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microfocus | netiq_privileged_access_manager | * | cpe:2.3:a:microfocus:netiq_privileged_access_manager:*:*:*:*:*:*:*:* |
| microfocus | netiq_privileged_access_manager | 3.7 | cpe:2.3:a:microfocus:netiq_privileged_access_manager:3.7:-:*:*:*:*:*:* |
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.2%
Related for NVD:CVE-2020-11847