CVE-2020-7004 - VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application

Back Back to CVE browser

HIGH

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application

Published Apr 3, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application.

Affected products

Vendor Visam Product VBASE Editor Default
n/a
- Version
  11.5.0.2
  Status
  affected
  Constraints
  -
Vendor Visam Product VBASE Web-Remote Module Default
n/a
- Version
  all
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Visam

VBASE Editor

n/a

Version	Status	Constraints
11.5.0.2	affected	-

Visam

VBASE Web-Remote Module

n/a

Version	Status	Constraints
all	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28144
Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-084-01
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28144		Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-084-01		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource