Test ID:	1.3.6.1.4.1.25623.1.0.112698
Category:	Huawei
Title:	Huawei GaussDB 200 OLAP 6.5.1 Multiple Vulnerabilities
Summary:	Huawei GaussDB 200 is affected by multiple command injection and path traversal vulnerabilities.
Description:	Summary: Huawei GaussDB 200 is affected by multiple command injection and path traversal vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - multiple command injection vulnerabilities due to insufficient input validation (CVE-2020-1790, CVE-2020-1811) - a path traversal vulnerability due to insufficient input path validation (CVE-2020-1853) Vulnerability Impact: Successful exploitation of these vulnerabilities could allow an authenticated attacker to traverse directories and download files to a specific directory which causes information leakage, or to inject and execute commands on the target. Affected Software/OS: Huawei GaussDB 200 OLAP version 6.5.1. Solution: Update Huawei GaussDB 200 OLAP to version 6.5.1.1 to fix the issue. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-1790 Common Vulnerability Exposure (CVE) ID: CVE-2020-1811 Common Vulnerability Exposure (CVE) ID: CVE-2020-1853
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.