Lucene search

PRIOn knowledge basePRION:CVE-2020-8269

HistoryNov 16, 2020 - 1:15 a.m.

Command injection

2020-11-1601:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

42.5%

JSON

An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9

CPENameOperatorVersion
virtual_apps_and_desktopsge1903
virtual_apps_and_desktopsle1912
virtual_apps_and_desktopsle2006
xenappeq7.6 cu8
xenappeq7.6
xenapplt7.6
xenappeq7.15 cu6
xenappeq7.15
xenappge7.7
xenapplt7.15

Name	Operator	Version
virtual_apps_and_desktops	ge	1903
virtual_apps_and_desktops	le	1912
virtual_apps_and_desktops	le	2006
xenapp	eq	7.6 cu8
xenapp	eq	7.6
xenapp	lt	7.6
xenapp	eq	7.15 cu6
xenapp	eq	7.15
xenapp	ge	7.7
xenapp	lt	7.15

Rows per page:

1-10 of 171

References

support.citrix.com/article/CTX285059

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

42.5%

JSON

Related for PRION:CVE-2020-8269