CVE-2020-8723

Published at:
2020-08-13T03:15:16.007

Global infos:

Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVE Status: Modified

References:

  • [email protected]
  • [email protected]
  • af854a3a-2127-422b-91ae-364da2661108
  • af854a3a-2127-422b-91ae-364da2661108
  • Metrics:

    AttributeValue
    Attack ComplexityLOW
    Attack VectorADJACENT_NETWORK
    Availability ImpactLOW
    Base Score6.3
    Base SeverityMEDIUM
    Confidentiality ImpactLOW
    Integrity ImpactLOW
    Privileges RequiredNONE
    ScopeCHANGED
    User InteractionREQUIRED
    Vector StringCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
    Exploitability Score2.1
    Impact Score3.7
    Source[email protected]
    TypePrimary

    Links:

    Exploit-db
    Github