Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qph-whwp-xm7r

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.

EPSS

Процентиль: 24%
0.00079
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 5.5
nvd
почти 2 года назад

A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges.

CVSS3: 5.5
fstec
почти 2 года назад

Уязвимость программного средства управления и контроля систем видеонаблюдения и безопасности Siemens Siveillance Control, связанная с недостатками механизма авторизации, позволяющая нарушителю получить права на запись для объектов, к которым у него были только права на чтение

EPSS

Процентиль: 24%
0.00079
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-863