CVE-2020-12487CWE-20

Command Execution Vulnerability in ABE service

High · published December 17, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-12-17T02:53Z
EPSS history
Timeline
  • 17 DEC 02:53Z
    Command Execution Vulnerability in ABE service
    cvelistv5