Lucene search
IcscertCVELIST:CVE-2020-14490HistoryJul 29, 2020 - 12:25 p.m.
CVE-2020-14490 OpenClinic GA
2020-07-2912:25:53
CWE-22
icscert
www.cve.org
5
cve-2020-14490
openclinic ga
file execution
sensitive files disclosure
malicious files
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
52.5%
OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.
CNA Affected
[
{
"product": "OpenClinic GA",
"vendor": "open source",
"versions": [
{
"status": "affected",
"version": "5.09.02"
},
{
"status": "affected",
"version": "5.89.05b"
}
]
}
]Related
prion
prion
Code injection
2020-07-29 13:15:00
cve
cve
CVE-2020-14490
2020-07-29 13:15:10
nvd
nvd
CVE-2020-14490
2020-07-29 13:15:10
ics
ics
OpenClinic GA (Update B)
2021-06-15 12:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.5
Confidence
High
EPSS
0.002
Percentile
52.5%
Related for CVELIST:CVE-2020-14490