Vulnerability Description
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Visam | Vbase Editor | 11.5.0.2 |
| Visam | Vbase Web-Remote | - |
Related Weaknesses (CWE)
References
- https://www.us-cert.gov/ics/advisories/icsa-20-084-01MitigationThird Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-084-01MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-7004?
CVE-2020-7004 is a vulnerability with a CVSS score of 8.8 (HIGH). VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system th...
How severe is CVE-2020-7004?
CVE-2020-7004 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7004?
Check the references section above for vendor advisories and patch information. Affected products include: Visam Vbase Editor, Visam Vbase Web-Remote.