CVE-2020-13227 Information disclosure in n/a

What is CVE-2020-13227?

CVE-2020-13227 is a medium-severity vulnerability in n/a, published on 2 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid path permission error. This bypasses the fakepath protection mechanism.

Weakness: CWE-22

Which versions are affected by CVE-2020-13227?

It affects 1 product.

Products include Sysax Multi Server.

How do I fix CVE-2020-13227?

No fix has been published for CVE-2020-13227 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-13227 being exploited?

There is no known exploitation of CVE-2020-13227 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2012-10060 Sysax Multi Server < 5.55 SSH Username Buffer Overflow Critical 9.3
• CVE-2009-4790 Path traversal in n/a Critical 9.0
• CVE-2020-13229 Auth bypass in n/a High 8.8
• CVE-2013-10065 Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS High 8.7
• CVE-2024-53458 Denial of service in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p3pr-hfwc-v329.