← Back

CVE-2020-7831

nvd nist
Published: Aug 24, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.

Affected (1)

Products: Inogard: Ebiz4u
Inogard
1 product
Ebiz4u
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ebiz4u
Version cviewer_object_1.0.5.1
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-494
Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References (2)

Source: vuln@krcert.or.kr
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.