CVE-2020-12850 The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4.

What is CVE-2020-12850?

CVE-2020-12850 is a high-severity vulnerability in n/a, published on 11 Jun 2020.

Official description

The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Cells Enterprise OVF (such as version 2.0.3) have a looser policy restriction allowing the “pydio” user to execute any privileged command using sudo. In version 2.0.4 of the appliance, the user pydio is responsible for running all the services and binaries that are contained in the Pydio Cells web application package, such as mysqld, cells, among others. This user has privileges restricted to run those services and nothing more.

Weakness: CWE-269

Which versions are affected by CVE-2020-12850?

It affects 1 product.

Products include Pydio Cells.

How do I fix CVE-2020-12850?

No fix has been published for CVE-2020-12850 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-12850 being exploited?

There is no known exploitation of CVE-2020-12850 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-32749 Privilege escalation in n/a High 8.8
• CVE-2019-12901 Path traversal in n/a High 8.8
• CVE-2020-12851 Path traversal in n/a High 8.1
• CVE-2020-12847 Command injection in n/a High 7.2
• CVE-2020-12852 Code injection in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7hh6-jvfj-8w78.