Lucene search

K
f5F5F5:K87235248
HistoryApr 12, 2021 - 12:00 a.m.

K87235248 : ImageMagick vulnerability CVE-2020-29599

2021-04-1200:00:00
my.f5.com
21

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

Security Advisory Description

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. (CVE-2020-29599)

Impact

There is no impact; F5 products are not affected by this vulnerability.