CVE-2020-15397
High
Description
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).
SeverityHigh
CVSS7.8
Exploit probability—
ProductIfax Hylafax Enterprise
PublishedJun 30, 2020
First seenJun 30, 2020
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ifax hylafax_enterprise | No range specified | — |
| hylafax\+_project hylafax\+ | v ≤ 7.0.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.