PT-2020-11232 · Pexip · Pexip Infinity

Published 2020-09-25 · Updated 2020-10-02 · CVE-2019-7177

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 20.1

Description The issue allows code injection onto nodes via an admin.

Recommendations For versions prior to 20.1, update to version 20.1 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-7177

Affected Products

Pexip Infinity

References · 4

• https://docs.pexip.com/admin/release_notes.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7177 · Security Note
• https://docs.pexip.com/admin/security_bulletins.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-7177 · Vendor Advisory