CVE-2020-10574: Critical severity meetecho janus vulnerability
Published Mar 14, 2020
·Updated
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "querylogger" Admin API request, because of a typo in the JSON validation.
Affected Software
1 affected component
meetecho janus<=0.9.1
Remediation
Patch Available
Event History
Mar 14, 2020
CVE Published
via MITRE·07:07 PM
Data Sourced
via MITRE·07:07 PM
Description
Frequently Asked Questions
1
What is CVE-2020-10574?
CVE-2020-10574 is a vulnerability discovered in Janus through version 0.9.1 that allows an attacker to execute arbitrary code or cause denial of service.
2
How severe is CVE-2020-10574?
CVE-2020-10574 has a severity score of 9.8 out of 10, indicating a critical vulnerability.
3
What software is affected by CVE-2020-10574?
The Meetecho Janus software version up to and including 0.9.1 is affected.
4
Is there a fix available for CVE-2020-10574?
Yes, the fix for CVE-2020-10574 is available in the Janus repository on GitHub. You can find more information in the provided reference.
5
What is the Common Weakness Enumeration (CWE) for CVE-2020-10574?
The Common Weakness Enumeration (CWE) for CVE-2020-10574 is CWE-706.