4
CVSSv2

CVE-2020-1853

Published: 17/02/2020 Updated: 19/02/2020
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

huawei gaussdb 200 6.5.1

Vendor Advisories

There is a path traversal vulnerability in Huawei GaussDB Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory Successful exploit may cause information leakage (Vulnerability ID: HWPSIRT-2019-10053) This vulnerability has been assigned a Common Vulnerabilities an ...