CVE-2020-1853: Path Traversal

Published Feb 17, 2020

Updated

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.

Affected Software

1 affected component

Huawei Gaussdb 200=6.5.1

Event History

Feb 17, 2020

CVE Published

via MITRE·08:55 PM

Data Sourced

via MITRE·08:55 PM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-1853?

The severity of CVE-2020-1853 is rated as high due to the potential for information leakage.

How do I fix CVE-2020-1853?

To fix CVE-2020-1853, ensure that you update to the latest version of GaussDB 200 that addresses the path traversal vulnerability.

Who is affected by CVE-2020-1853?

CVE-2020-1853 affects users of Huawei GaussDB 200 version 6.5.1.

What type of vulnerability is CVE-2020-1853?

CVE-2020-1853 is a path traversal vulnerability that allows authenticated attackers to access unauthorized files.

What could be the impact of exploiting CVE-2020-1853?

Exploitation of CVE-2020-1853 could lead to information leakage, compromising sensitive data.