ID CVE-2020-14072
Summary An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.
References
Vulnerable Configurations
  • cpe:2.3:a:mk-auth:mk-auth:19.01:*:*:*:*:*:*:*
    cpe:2.3:a:mk-auth:mk-auth:19.01:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 02-07-2020 - 14:27)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
misc
Last major update 02-07-2020 - 14:27
Published 29-06-2020 - 17:15
Last modified 02-07-2020 - 14:27
Back to Top