Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rf7-fr54-x6c7

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.

EPSS

Процентиль: 31%
0.00116
Низкий

7.8 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.

EPSS

Процентиль: 31%
0.00116
Низкий

7.8 High

CVSS3

Дефекты

CWE-284