PT-2020-19827 · Inogard · Ebiz4U

Published 2020-08-24 · Updated 2020-09-02 · CVE-2020-7831

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions INOGARD Ebiz4u (affected versions not specified)

Description A vulnerability in the web-based contract management service interface Ebiz4u could allow an attacker to download any file. The attacker can use directory traversal via the startup menu directory for automatic execution, which requires the victim user to reboot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2020-7831

Affected Products

Ebiz4U

References · 3

• https://osv.dev/vulnerability/CVE-2020-7831 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7831 · Security Note
• https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559 · Note