CVE-2019-20807

MEDIO 5.3CVE-2019-20807 · Published 28/05/2020 · updated 17/06/2026

In breve

CVE-2019-20807 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda command center (starwindsoftware), san & nas (starwindsoftware), vim (vim).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.49%, superiore al 42.1% delle vulnerabilità.
Correzione: aggiornare a 8.1.0881 o successiva.

Package	Affected versions	Patched versions
command center starwindsoftware	`= 2`	No fix yet
san & nas starwindsoftware	`= 1.0`	No fix yet
vim vim	`< 8.1.0881`	`8.1.0881`

Description

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

References

lists.opensuse.org/opensuse-security-announce/2020-06/msg00018.html · Mailing List
seclists.org/fulldisclosure/2020/Jul/24 · Mailing List
vim/vim commit 8c62a08 · Patch
vim/vim release v8.1.0881 · Release Notes
lists.debian.org/debian-lts-announce/2022/01/msg00003.html · Mailing List
support.apple.com/kb/HT211289 · Third Party Advisory
usn.ubuntu.com/4582-1 · Mailing List
starwindsoftware.com/security/sw-20220812-0003 · Third Party Advisory

Altre vulnerabilità di command center

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command center

starwindsoftware

= 2

No fix yet

san & nas

starwindsoftware

= 1.0

No fix yet

vim

< 8.1.0881

8.1.0881

Altre vulnerabilità di command center

Vedi tutto →