Test Kennung:	1.3.6.1.4.1.25623.1.0.112698
Kategorie:	Huawei
Titel:	Huawei GaussDB 200 OLAP 6.5.1 Multiple Vulnerabilities
Zusammenfassung:	Huawei GaussDB 200 is affected by multiple command injection and path traversal vulnerabilities.
Beschreibung:	Summary: Huawei GaussDB 200 is affected by multiple command injection and path traversal vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - multiple command injection vulnerabilities due to insufficient input validation (CVE-2020-1790, CVE-2020-1811) - a path traversal vulnerability due to insufficient input path validation (CVE-2020-1853) Vulnerability Impact: Successful exploitation of these vulnerabilities could allow an authenticated attacker to traverse directories and download files to a specific directory which causes information leakage, or to inject and execute commands on the target. Affected Software/OS: Huawei GaussDB 200 OLAP version 6.5.1. Solution: Update Huawei GaussDB 200 OLAP to version 6.5.1.1 to fix the issue. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-1790 Common Vulnerability Exposure (CVE) ID: CVE-2020-1811 Common Vulnerability Exposure (CVE) ID: CVE-2020-1853
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.