Lucene search

HuaweiCVE-2019-5278

HistoryDec 13, 2019 - 10:15 p.m.

CVE-2019-5278

2019-12-1322:15:11

CWE-125

huawei

web.nvd.nist.gov

100

cve-2019-5278

gauss100 oltp database

out-of-bounds read vulnerability

advanced packages feature

campusinsight

nvd

sql injection

database security

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.0%

JSON

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Gauss100 OLTP database in CampusInsight before V100R019C00SPC200. Attackers who gain the specific permission can use this vulnerability by sending elaborate SQL statements to the database. Successful exploit of this vulnerability may cause the database to crash.

Affected configurations

Nvd

Vulners

Node

huaweicampusinsightMatchv100r019c00

VendorProductVersionCPE
huaweicampusinsightv100r019c00cpe:2.3:a:huawei:campusinsight:v100r019c00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	campusinsight	v100r019c00	cpe:2.3:a:huawei:campusinsight:v100r019c00:::::::*

CNA Affected

[
  {
    "product": "CampusInsight",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V100R019C00"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.0%

JSON

Related for CVE-2019-5278