← Back

CVE-2020-3350

nvd nist
Published: Jun 18, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.0 / Impact: 5.2
Source: NVD

Description

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the attacker would not normally have privileges to delete, producing system instability or causing the endpoint software to stop working.

Affected (11)

Show all products
2 products
Clam Antivirus
1 product
Fedora
1 product
Debian Linux
1 product
Ubuntu Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Before 1.12.4
Before 1.12.4
Before 0.102.4
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 31
Version 32
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 9.0
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 12.04
Version 14.04
Version 16.04
Version 18.04
Version 20.04

References (14)

Source: psirt@cisco.com
Mailing ListThird Party Advisory
Source: psirt@cisco.com
Third Party Advisory
Source: psirt@cisco.com
Third Party Advisory
Source: psirt@cisco.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.