Lucene search
HistorySep 14, 2022 - 3:15 a.m.
CVE-2020-19586
yellowfin bi
access control
privilege escalation
miadminstyles.i4 admin ui
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS
0.002
Percentile
58.2%
Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
Affected configurations
Node
yellowfinbibusiness_intelligenceMatch7.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| yellowfinbi | business_intelligence | 7.3 | cpe:2.3:a:yellowfinbi:business_intelligence:7.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-19586
2022-09-14 02:48:10
prion
prion
Improper access control
2022-09-14 03:15:00
cve
cve
CVE-2020-19586
2022-09-14 03:15:07
CVSS3
9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS
0.002
Percentile
58.2%
Related for NVD:CVE-2020-19586