What is CVE-2020-5555?

CVE-2020-5555 is a critical-severity vulnerability in Ekakin Shihonkanri Plus Goout, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2020-03-25.

How severe is CVE-2020-5555?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Improper input validation in Ekakin Shihonkanri Plus Goout

CVE-2020-5555

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (67.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Ekakin Shihonkanri Plus Goout — versions Ver1.5.8 and Ver2.2.10
Shihonkanri_plus_goout_project Shihonkanri_plus_goout — versions 1.5.8, 2.2.10

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-5555?: CVE-2020-5555 is a critical-severity vulnerability in Ekakin Shihonkanri Plus Goout, classified under Improper Input Validation. CVSS score: 9.1/10. Published 2020-03-25.
How severe is CVE-2020-5555?: Critical severity. CVSS v3 base score is 9.1 out of 10.