Lucene search

PRIOn knowledge basePRION:CVE-2020-3993

HistoryOct 20, 2020 - 5:15 p.m.

Improper access control

2020-10-2017:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

26.9%

JSON

VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM positioning may be able to exploit this issue to compromise the transport node.

CPENameOperatorVersion
cloud_foundationge4.0
cloud_foundationlt4.1
cloud_foundationge3.0
cloud_foundationlt3.10.1.1
nsx-t_data_centerge2.5.0
nsx-t_data_centerlt2.5.2.2.0
nsx-t_data_centerge3.0.0
nsx-t_data_centerlt3.0.2

Name	Operator	Version
cloud_foundation	ge	4.0
cloud_foundation	lt	4.1
cloud_foundation	ge	3.0
cloud_foundation	lt	3.10.1.1
nsx-t_data_center	ge	2.5.0
nsx-t_data_center	lt	2.5.2.2.0
nsx-t_data_center	ge	3.0.0
nsx-t_data_center	lt	3.0.2

References

www.vmware.com/security/advisories/VMSA-2020-0023.html

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

26.9%

JSON

Related for PRION:CVE-2020-3993