Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-7920

pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.

Published

2020-02-06T17:15:14.380

Last Modified

2024-11-21T05:38:00.723

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Primary
CWE-835

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	percona	monitoring_and_management	< 2.2.1	Yes

References

https://jira.percona.com/browse/PMM-5232 Patch, Third Party Advisory ([email protected])
https://jira.percona.com/browse/PMM-5233 Third Party Advisory ([email protected])
https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/ Vendor Advisory ([email protected])
https://www.percona.com/doc/percona-monitoring-and-management/2.x/release-notes/2.2.1.html Release Notes, Vendor Advisory ([email protected])
https://jira.percona.com/browse/PMM-5232 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://jira.percona.com/browse/PMM-5233 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.percona.com/doc/percona-monitoring-and-management/2.x/release-notes/2.2.1.html Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)