CVE-2020-6950

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 02-06-2021 06:15

Last modified: - 12-05-2022 04:06

Total changes: - 9

Description

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

Required

User interaction

6.5

Base score

2.8

3.6

Exploitability score

Impact score

Verification logic

vendor=eclipse AND product=mojarra AND versionEndExcluding=2.3.14

vendor=oracle AND product=solaris_cluster AND version=4.0

vendor=oracle AND product=banking_platform AND version=2.6.2

vendor=oracle AND product=banking_platform AND version=2.7.1

vendor=oracle AND product=banking_platform AND version=2.9.0

vendor=oracle AND product=communications_network_integrity AND version=7.3.6

vendor=oracle AND product=communications_pricing_design_center AND version=12.0.0.3.0

vendor=oracle AND product=banking_platform AND version=2.12.0

vendor=oracle AND product=banking_enterprise_default_management AND version=2.12.0

vendor=oracle AND product=banking_enterprise_default_management AND version=2.10.0

vendor=oracle AND product=retail_merchandising_system AND version=19.0.1

vendor=oracle AND product=hyperion_calculation_manager AND versionEndExcluding=11.2.8.0

vendor=oracle AND product=time_and_labor AND versionEndIncluding=12.2.11 AND versionStartIncluding=12.2.6

Reference

Keywords

CVE-2020-6950

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-6950

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures