PT-2019-17553 · Huawei · Campusinsight+1

Publicado 2019-12-13 · Atualizado 2019-12-19 · CVE-2019-5278

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CampusInsight versions prior to V100R019C00SPC200

Description The issue is related to an out-of-bounds read in the Advanced Packages feature of the Gauss100 OLTP database. Attackers with specific permissions can exploit this by sending elaborate SQL statements to the database, potentially causing it to crash.

Recommendations For versions prior to V100R019C00SPC200, update to V100R019C00SPC200 or later to resolve the issue. As a temporary workaround, consider restricting access to the Advanced Packages feature to minimize the risk of exploitation.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-5278

Produtos afetados

Campusinsight

Gauss100

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5278 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5278 · Aviso do Fabricante
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-gauss100-en · Aviso do Fabricante