PT-2020-19973 · Blamer · Blamer

Published 2020-03-20 · Updated 2021-05-06 · CVE-2020-8137

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions blamer versions 1.0.0 and earlier

Description A code injection issue may result in remote code execution when the input can be controlled by an attacker.

Recommendations For versions 1.0.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-8137

GHSA-7VM7-J8P7-H346

Affected Products

Blamer

References · 4

• 🔥 https://hackerone.com/reports/772448 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8137 · Security Note
• https://osv.dev/vulnerability/GHSA-7vm7-j8p7-h346 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8137 · Vendor Advisory