1. Home
  2. CVE Database
  3. CVE-2020-4066
LOW · 3.8

CVE-2020-4066

In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a...

Vulnerability Description

In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This has been patched in 0.95.

CVSS Score

3.8

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Limdu ProjectLimdu< 0.9.5

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2020-4066?

CVE-2020-4066 is a vulnerability with a CVSS score of 3.8 (LOW). In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a...

How severe is CVE-2020-4066?

CVE-2020-4066 has been rated LOW with a CVSS base score of 3.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-4066?

Check the references section above for vendor advisories and patch information. Affected products include: Limdu Project Limdu.