CVE-2020-36529: SevOne Network Management System Traceroute traceroute.php command injection
Published Jun 3, 2022
·Updated
A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely.
Affected Software
1 affected component
IBM SevOne Network Performance Management>=5.7.2.0<=5.7.2.22
Event History
Jun 3, 2022
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-36529?
CVE-2020-36529 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2020-36529?
CVE-2020-36529 is a privilege escalation vulnerability that involves command injection.
3
What software versions are affected by CVE-2020-36529?
CVE-2020-36529 affects SevOne Network Management System versions up to 5.7.2.22.
4
How do I fix CVE-2020-36529?
To fix CVE-2020-36529, you should upgrade your SevOne Network Management System to a version higher than 5.7.2.22.
5
Can CVE-2020-36529 be exploited remotely?
Yes, CVE-2020-36529 can be initiated as a remote attack.