Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-58cr-5qrg-w3pj

Опубликовано: 19 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file.

An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file.

EPSS

Процентиль: 35%
0.00144
Низкий

7.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file.

CVSS3: 7.9
fstec
больше 3 лет назад

Уязвимость антивирусного программного средства McAfee Security Scan Plus (MSS+), связанная с недостатками разграничения доступа, позволяющая нарушителю выполнить LotL-атаку (атака типа Living off the Land)

EPSS

Процентиль: 35%
0.00144
Низкий

7.8 High

CVSS3

Дефекты

CWE-269