CVE-2020-11016criticalCWE-78

CVE-2020-11016: fallo crítico en certtools IntelMQ Manager

Remote code execution in Message sending functionality in IntelMQ Manager

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear IntelMQ Manager

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 2.3%
IntelMQ Manager from version 1.1.0 and before version 2.1.1 has a vulnerability where the backend incorrectly handled messages given by user-input in the "send" functionality of the Inspect-tool of the Monitor component. An attacker with access to the IntelMQ Manager could possibly use this issue to execute arbitrary code with the privileges of the webserver. Version 2.1.1 fixes the vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Productos afectados
certtools · IntelMQ Manager