CVE-2020-7479CWE-306

A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a…

published March 23, 2020

CVSS
—
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a local user to execute processes that otherwise require escalation privileges when sending local network commands to the IGSS Update Service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2020-03-23T19:18Z
EPSS history
Timeline
  • 23 MAR 19:18Z
    A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a…
    cvelistv5