Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7crm-h967-f3pf

Опубликовано: 29 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

EPSS

Процентиль: 26%
0.00093
Низкий

7.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 5.8
nvd
больше 3 лет назад

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

EPSS

Процентиль: 26%
0.00093
Низкий

7.8 High

CVSS3

Дефекты

CWE-59