7.8
CVE-2020-9090
- EPSS 0.03%
- Veröffentlicht 12.10.2020 14:15:14
- Zuletzt bearbeitet 21.11.2024 05:40:00
- Quelle psirt@huawei.com
- CVE-Watchlists
- Unerledigt
LoginFusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Fusionaccess Version6.5.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.044 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|