PT-2020-15127 · Huawei · Manageone+1

Published 2020-03-20 · Updated 2020-03-24 · CVE-2020-1862

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions CampusInsight version V100R019C00 ManageOne version 6.5.RC2.B050

Description A double free vulnerability exists in some Huawei products, allowing a local attacker with low privilege to perform operations that exploit the vulnerability. The successful exploitation of this issue, due to doubly freeing memory, may cause service abnormalities.

Recommendations For CampusInsight version V100R019C00, update to a version that fixes the double free vulnerability. For ManageOne version 6.5.RC2.B050, update to a version that fixes the double free vulnerability. As a temporary workaround, consider restricting access to the affected products until a patch is available.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2020-1862

Affected Products

Campusinsight

Manageone

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-1862 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1862 · Vendor Advisory
• https://t.me/cvenotify/1951 · Telegram Post