VDB-165300 · CVE-2020-15929 · 49077

Ortus TestBox fino 4.1.0 Query String HTMLRunner.cfm escalazione di privilegi

In Ortus TestBox fino 4.1.0 è stato trovato un punto critico di livello critico. Riguarda una funzione sconosciuta del file system/runners/HTMLRunner.cfm del componente Query String Handler. Informazioni riguardo una possibile contromisura non sono al momento disponibili. Si suggerisce di sostituire il prodotto con uno equivalente.

Timeline

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10716738	10/12/2020	VulD...	cvss3_nvd_basescore	9.8	nist.gov	10/12/2020	accepted	90
10716737	10/12/2020	VulD...	cvss2_nvd_basescore	7.5	nist.gov	10/12/2020	accepted	90
10716736	10/12/2020	VulD...	price_0day	$0-$5k	see documentation	10/12/2020	accepted	90
10716735	10/12/2020	VulD...	cvss3_meta_tempscore	7.6	see documentation	10/12/2020	accepted	90
10716734	10/12/2020	VulD...	cvss3_meta_basescore	8.0	see documentation	10/12/2020	accepted	90
10716733	10/12/2020	VulD...	cvss2_nvd_ai	P	nvd.nist.gov	10/12/2020	accepted	70
10716732	10/12/2020	VulD...	cvss2_nvd_ii	P	nvd.nist.gov	10/12/2020	accepted	70
10716731	10/12/2020	VulD...	cvss2_nvd_ci	P	nvd.nist.gov	10/12/2020	accepted	70
10716730	10/12/2020	VulD...	cvss2_nvd_au	N	nvd.nist.gov	10/12/2020	accepted	70
10716729	10/12/2020	VulD...	cvss2_nvd_ac	L	nvd.nist.gov	10/12/2020	accepted	70
10716728	10/12/2020	VulD...	cvss2_nvd_av	N	nvd.nist.gov	10/12/2020	accepted	70
10716727	10/12/2020	VulD...	cvss3_nvd_a	H	nvd.nist.gov	10/12/2020	accepted	70
10716726	10/12/2020	VulD...	cvss3_nvd_i	H	nvd.nist.gov	10/12/2020	accepted	70
10716725	10/12/2020	VulD...	cvss3_nvd_c	H	nvd.nist.gov	10/12/2020	accepted	70
10716724	10/12/2020	VulD...	cvss3_nvd_s	U	nvd.nist.gov	10/12/2020	accepted	70
10716723	10/12/2020	VulD...	cvss3_nvd_ui	N	nvd.nist.gov	10/12/2020	accepted	70
10716722	10/12/2020	VulD...	cvss3_nvd_pr	N	nvd.nist.gov	10/12/2020	accepted	70
10716721	10/12/2020	VulD...	cvss3_nvd_ac	L	nvd.nist.gov	10/12/2020	accepted	70
10716720	10/12/2020	VulD...	cvss3_nvd_av	N	nvd.nist.gov	10/12/2020	accepted	70
10716719	10/12/2020	VulD...	cwe	77 (escalazione di privilegi)	nvd.nist.gov	10/12/2020	accepted	70