CVE-2019-20807

MEDIUM 5.3CVE-2019-20807 · Published 28/05/2020 · updated 17/06/2026

In short

CVE-2019-20807 is a MEDIUM (CVSS 5.3) vulnerability affecting command center (starwindsoftware), san & nas (starwindsoftware), vim (vim).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
Fix: update to 8.1.0881 or later.

Package	Affected versions	Patched versions
command center starwindsoftware	`= 2`	No fix yet
san & nas starwindsoftware	`= 1.0`	No fix yet
vim vim	`< 8.1.0881`	`8.1.0881`

Description

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

References

lists.opensuse.org/opensuse-security-announce/2020-06/msg00018.html · Mailing List
seclists.org/fulldisclosure/2020/Jul/24 · Mailing List
vim/vim commit 8c62a08 · Patch
vim/vim release v8.1.0881 · Release Notes
lists.debian.org/debian-lts-announce/2022/01/msg00003.html · Mailing List
support.apple.com/kb/HT211289 · Third Party Advisory
usn.ubuntu.com/4582-1 · Mailing List
starwindsoftware.com/security/sw-20220812-0003 · Third Party Advisory

More vulnerabilities in command center

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command center

starwindsoftware

= 2

No fix yet

san & nas

starwindsoftware

= 1.0

No fix yet

vim

< 8.1.0881

8.1.0881

More vulnerabilities in command center

See all →