CVE-2020-12252 - CVE House
Back to Database
Status published Medium CVE-2020-12252

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload...

Vulnerability Description

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12252

Credits & Attribution

No credits recorded in the NVD database.

References

More from gigamon

View All →
CVE-2020-23250
GigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for...
Low 2.3
CVE-2020-23249
GigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password...
Medium 4.7
CVE-2020-12251
An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload...
Low 2.2

Affected Vendor

Affected Software

gigavue
Vulnerable Versions:
5.4, 5.5, 5.6, 5.7, 5.8, 5.9

Timeline

Official Publish: April 29th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.