CVE-2020-25580

Katalog CVE

CVSS 5.3 · Medium EPSS 0,72%

Kerentanan Incorrect Comparison pada freebsd. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the effect of causing rules to fail to match even when they should not. This means that rules denying access may be ignored.

Rincian

Terbit di NVD

26 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-697: Incorrect Comparison

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-21:03.pam_login_access.asc advisory vendor
• https://security.netapp.com/advisory/ntap-20210423-0005/ advisory pihak ketiga