CVE-2020-1790

Description

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.582

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-1790 ,CVE-2020-1811 ,CVE-2020-1853 are affected in gaussdb_200 6.5.1	NCM
Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability (CVE-2020-1790)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234