CVE-2020-5281

High

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is…

GitHub_M·CWE-90·Published 2020-03-25

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

192 chars

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.

NVDen

192 chars

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.

En Perun versiones anteriores a 3.9.1, VO o el administrador de grupo pueden modificar la configuración de LDAP extSource para recuperar todo desde Perun LDAP. El problema es corregido en la versión 3.9.1, mediante el saneamiento de la entrada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	6.2	—	—	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
3.1	Primary	cve.org	6.2	—	—	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N
3.1	Secondary	NVD	6.2	1.0	4.7	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N