CVE-2020-7831CWE-494

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file

High · published August 24, 2020

CVSS v3.1
8.8
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00867 · 58.3th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2020-08-24T15:00Z
EPSS history
Timeline
  • 24 AUG 15:00Z
    A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file
    cvelistv5