CVE-2019-17635

{"id": "CVE-2019-17635", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2020-01-17T19:15:12.010", "references": [{"url": "https://bugs.eclipse.org/bugs/show_bug.cgi?id=558633", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "source": "emo@eclipse.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-502"}]}, {"type": "Secondary", "source": "emo@eclipse.org", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the heap dump is reopened in Memory Analyzer. The user must chose to reopen an already parsed heap dump with an untrusted index for the problem to occur. The problem can be averted if the index files from an untrusted source are deleted and the heap dump is opened and reparsed. Also some local configuration data is subject to a deserialization vulnerability if the local data were to be replaced with a malicious version. This can be averted if the local configuration data stored on the file system cannot be changed by an attacker. The vulnerability could possibly allow code execution on the local system."}, {"lang": "es", "value": "Eclipse Memory Analyzer versi\u00f3n 1.9.1 y versiones anteriores est\u00e1 sujeto a una vulnerabilidad de deserializaci\u00f3n si un archivo de \u00edndice de un volcado de almacenamiento analizado se reemplaza por una versi\u00f3n malintencionada y el volcado de almacenamiento din\u00e1mico se vuelve a abrir en el Analizador de memoria. El usuario debe optar por volver a abrir un volcado de almacenamiento din\u00e1mico ya analizado con un \u00edndice que no es de confianza para que se produzca el problema. El problema se puede evitar si se eliminan los archivos de \u00edndice de un origen que no es de confianza y se abre y vuelve a analizar el volcado del mont\u00f3n. Tambi\u00e9n algunos datos de configuraci\u00f3n local est\u00e1n sujetos a una vulnerabilidad de deserializaci\u00f3n si los datos locales se reemplazaran con una versi\u00f3n malintencionada. Esto se puede evitar si un atacante no puede cambiar los datos de configuraci\u00f3n local almacenados en el sistema de archivos. La vulnerabilidad podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo en el sistema local."}], "lastModified": "2020-01-23T16:26:32.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eclipse:memory_analyzer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6550331-1E8F-4C06-8611-F8AD6F2889CB", "versionEndIncluding": "1.9.1"}], "operator": "OR"}]}], "sourceIdentifier": "emo@eclipse.org"}