Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3pg9-h44j-gvg9

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

EPSS

Процентиль: 20%
0.00065
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 6.7
nvd
почти 9 лет назад

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

EPSS

Процентиль: 20%
0.00065
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-428