Security Advisory

CVE-2020-7479

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-23 19:18:26
Last updated 2024-08-04 09:33:19
Assigner schneider
State PUBLISHED

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a local user to execute processes that otherwise require escalation privileges when sending local network commands to the IGSS Update Service.