Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-13577
HistoryFeb 10, 2021 - 8:15 p.m.

CVE-2020-13577

2021-02-1020:15:14
CWE-476
[email protected]
web.nvd.nist.gov
6
denial-of-service
genivia gsoap
ws-security
http request
vulnerability
soap request

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.7%

JSON

A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

Affected configurations

Nvd
Node
geniviagsoapMatch2.8.107
Node
fedoraprojectfedoraMatch33
OR
fedoraprojectfedoraMatch34
VendorProductVersionCPE
geniviagsoap2.8.107cpe:2.3:a:genivia:gsoap:2.8.107:*:*:*:*:*:*:*
fedoraprojectfedora33cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
fedoraprojectfedora34cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Related

debiancve 1
gitlab 1
veracode 1
cve 1
talos 1
cvelist 1
prion 1
ubuntucve 1
openvas 4
fedora 2
nessus 2
debian 1
mageia 1
osv 1
ibm 1
debiancve
debiancve
CVE-2020-13577
2021-02-10 20:15:14
gitlab
gitlab
NULL Pointer Dereference
2021-02-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-03-09 21:46:46
cve
cve
CVE-2020-13577
2021-02-10 20:15:14
talos
talos
Genivia gSOAP WS-Security plugin denial-of-service vulnerability
2021-01-05 00:00:00
cvelist
cvelist
CVE-2020-13577
2021-02-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2021-02-10 20:15:00
ubuntucve
ubuntucve
CVE-2020-13577
2021-02-10 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0263)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-3745-1)
2024-03-01 00:00:00
Fedora: Security Advisory for gsoap (FEDORA-2021-faea36a9c3)
2021-03-17 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: gsoap-2.8.104-4.fc33
2021-03-17 02:18:38
[SECURITY] Fedora 34 Update: gsoap-2.8.104-4.fc34
2021-03-19 20:30:39
nessus
nessus
Debian dla-3745 : gsoap - security update
2024-03-01 00:00:00
Fedora 33 : gsoap (2021-faea36a9c3)
2021-03-17 00:00:00
debian
debian
[SECURITY] [DLA 3745-1] gsoap security update
2024-02-29 23:53:40
mageia
mageia
Updated gsoap packages fix security vulnerabilities
2021-06-16 23:22:25
osv
osv
gsoap - security update
2024-02-29 00:00:00
ibm
ibm
Security Bulletin: Genivia gSOAP vulnerabilities affect IBM Spectrum Protect for Virtual Environments:Data Protection for VMware and Spectrum Protect Client (CVE-2020-13575, CVE-2020-13578, CVE-2020-13574, CVE-2020-13577, CVE-2020-13576, CVE-2020-21783)
2021-06-15 01:00:14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.7%

JSON
Related for NVD:CVE-2020-13577
debiancve1gitlab1veracode1cve1talos1cvelist1prion1ubuntucve1openvas4fedora2nessus2debian1mageia1osv1ibm1