Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-12352
HistoryOct 14, 2020 - 12:00 a.m.

CVE-2020-12352

2020-10-1400:00:00
ubuntu.com
ubuntu.com
12

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.8%

Improper access control in BlueZ may allow an unauthenticated user to
potentially enable information disclosure via adjacent access.

Notes

Author Note
sbeattie introduced in 3.6
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux<Β 4.15.0-122.124UNKNOWN
ubuntu20.04noarchlinux<Β 5.4.0-52.57UNKNOWN
ubuntu16.04noarchlinux<Β 4.4.0-197.229UNKNOWN
ubuntu18.04noarchlinux-gke-5.4<Β anyUNKNOWN
ubuntu18.04noarchlinux-gkeop-5.4<Β anyUNKNOWN
ubuntu16.04noarchlinux-hwe<Β 4.15.0-122.124~16.04.1UNKNOWN
ubuntu18.04noarchlinux-hwe-5.4<Β 5.4.0-52.57~18.04.1UNKNOWN
ubuntu20.04noarchlinux-hwe-5.8<Β anyUNKNOWN
ubuntu14.04noarchlinux-lts-xenial<Β 4.4.0-197.229~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlinux-oem<Β 4.15.0-1100.110UNKNOWN
Rows per page:
1-10 of 201

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.8%