CVE-2020-11977

In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service…

published September 15, 2020

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service Tasks to perform malicious operations, including but not limited to file read, file write, and code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02862 · 86.7th percentile
Published
2020-09-15T19:02Z
EPSS history
Timeline
  • 15 SEP 19:02Z
    In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service…
    cvelistv5