Vulnerability · Published Feb 6, 2020 · Assigned by mitre
CVE-2020-7920
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.1%top 18.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
Affected products (as reported)
References
- https://www.percona.com/doc/percona-monitoring-and-management/2.x/release-notes/2.2.1.html x_refsource_MISC
- https://jira.percona.com/browse/PMM-5233 x_refsource_MISC
- https://jira.percona.com/browse/PMM-5232 x_refsource_MISC
- https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/ x_refsource_MISC