CVE-2020-7920

EUVD-2020-28851
pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
Infinite Loop
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
perconamonitoring_and_management
2.2.0 ≤
𝑥
< 2.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jira.percona.com/browse/PMM-5232
https://jira.percona.com/browse/PMM-5233
https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/
https://www.percona.com/doc/percona-monitoring-and-management/2.x/release-notes/2.2.1.html
https://jira.percona.com/browse/PMM-5232
https://jira.percona.com/browse/PMM-5233
https://www.percona.com/blog/2020/02/03/improvements-in-pmm-bug-fixes-in-percona-server-percona-backup-for-mongodb-alert-release-roundup-2-3-2020/
https://www.percona.com/doc/percona-monitoring-and-management/2.x/release-notes/2.2.1.html