« Volver al listado

CVE-2020-12252

Estado: ModificadaMedia (6.2)—

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Gigamon — Gigavue

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-12252",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.2,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 0.7
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-04-29T14:15:19.027",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://seclists.org/fulldisclosure/2020/Apr/56",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://seclists.org/fulldisclosure/2020/Apr/56",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter."
    },
    {
      "lang": "es",
      "value": "Se descubrió un problema en Gigamon GigaVUE versión 5.5.01.11. La funcionalidad de carga permite una carga de archivos arbitrarios para un usuario autenticado. Si se sube un archivo ejecutable al directorio www-root, entonces podría resultar en una ejecución de código remota por medio del parámetro filename."
    }
  ],
  "lastModified": "2026-06-17T02:51:30.920",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0F7A693-C18C-4161-B7DA-87B225BAEB7F",
              "versionEndExcluding": "5.4.04",
              "versionStartIncluding": "5.4"
            },
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C3ABC43-2D02-4EE5-81B9-A4A19530B8C6",
              "versionEndExcluding": "5.5.02",
              "versionStartIncluding": "5.5"
            },
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99A1B0E4-F3E4-41D9-9F4A-1417B905A954",
              "versionEndExcluding": "5.6.02",
              "versionStartIncluding": "5.6"
            },
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DC0D650-83F7-4DD3-8A45-A80DE070BA59",
              "versionEndExcluding": "5.7.04",
              "versionStartIncluding": "5.7"
            },
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52761149-190E-4F36-AB31-F5301C1163D8",
              "versionEndExcluding": "5.8.02",
              "versionStartIncluding": "5.8"
            },
            {
              "criteria": "cpe:2.3:a:gigamon:gigavue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C112A4F9-8D70-4577-B28F-D4C414219064",
              "versionEndExcluding": "5.9.00.04",
              "versionStartIncluding": "5.9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}