CVEvulnerability

CVE-2020-12252

6.2 MEDIUM Published 2020-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS 2.0 ([email protected])
6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
CWE-434

Description

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter.

Affected configurations

• gigamon gigavue (>= 5.4 < 5.4.04) • gigamon gigavue (>= 5.5 < 5.5.02) • gigamon gigavue (>= 5.6 < 5.6.02) • gigamon gigavue (>= 5.7 < 5.7.04) • gigamon gigavue (>= 5.8 < 5.8.02) • gigamon gigavue (>= 5.9 < 5.9.00.04)

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References