CVE-2020-12080

Published: Sep 17, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash.

Affected (1)

Products: Flexera: Flexnet Publisher

Flexera

1 product

Flexnet Publisher

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flexera Flexnet Publisher	Version 11.16.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2020-12080-Remediated-in-FlexNet-Publisher/ta-p/143873

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://community.flexera.com/t5/FlexNet-Publisher-News/FlexNet-Publisher-2020-R2-11-17-0-is-here/ba-p/144017/jump-to/first-unread-message

Source: PSIRT-CNA@flexerasoftware.com

Release NotesVendor Advisory

https://www.tenable.com/security/research/tra-2020-28

Source: PSIRT-CNA@flexerasoftware.com

ExploitThird Party Advisory

https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2020-12080-Remediated-in-FlexNet-Publisher/ta-p/143873

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://community.flexera.com/t5/FlexNet-Publisher-News/FlexNet-Publisher-2020-R2-11-17-0-is-here/ba-p/144017/jump-to/first-unread-message

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://www.tenable.com/security/research/tra-2020-28

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.