PT-2020-19812 · Tobesoft · Tobesoft Xplatform

Published 2020-07-10 · Updated 2021-07-21 · CVE-2020-7815

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOBESOFT XPLATFORM versions prior to 9.2.260

Description The issue allows remote files to be downloaded by setting the arguments to a vulnerable method, which can be leveraged for code execution. This is a file download vulnerability that enables an attacker to cause impact.

Recommendations For TOBESOFT XPLATFORM versions prior to 9.2.260, update to version 9.2.260 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-7815

Affected Products

Tobesoft Xplatform

References · 4

• http://support.tobesoft.co.kr/Support/index.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7815 · Security Note
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35496 · Note