CVE-2020-19676

Exploit

EPSS 0.38%
Published 30.09.2020 18:15:23
Last modified 21.11.2024 05:09:19
Source cve@mitre.org
Teams watchlist Login
Open Login

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Alibaba ≫ Nacos Version1.1.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.38%	0.564

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

https://github.com/alibaba/nacos/issues/2284

Third Party Advisory

Exploit

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2020-19676

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-19676

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-19676

EUVD