CVE-2019-20807
Medium
Description
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).
SeverityMedium
CVSS5.3
Exploit probability—
Product
Starwindsoftware Command Center
PublishedMay 28, 2020
First seenMay 28, 2020
How to fix
Update
- vim vim8.1.0881 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| starwindsoftware command_center | 2 | — |
| vim vim | v < 8.1.0881 | 8.1.0881 |
| debian debian_linux | 9.0 | — |
| opensuse leap | 15.1 | — |
| canonical ubuntu_linux | 16.04, 18.04 | — |
| apple mac_os_x | 10.13.6, 10.14.6 | — |
| starwindsoftware san_\&_nas | 1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.