CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability

published February 17, 2020

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01144 · 66.4th percentile
Published
2020-02-17T23:28Z
EPSS history
Timeline
  • 17 FEB 23:28Z
    GaussDB 200 with version of 6.5.1 have a command injection vulnerability
    cvelistv5