CVE-2020-7831
- State
- Published
- Severity
- 8.8 High
- Published
- Aug 24, 2020
- Updated
- Sep 17, 2024
- Reserved
- Jan 22, 2020
Description
A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | krcert |
Weaknesses
- CWE-494 Download of Code Without Integrity Check
Affected Products
| Product | Versions |
|---|---|
Ebiz4u CViewer Object AxECM.dllINOGARD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.