Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7w7c-rqj8-5pmg

Опубликовано: 08 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

EPSS

Процентиль: 6%
0.00025
Низкий

7.8 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

EPSS

Процентиль: 6%
0.00025
Низкий

7.8 High

CVSS3

Дефекты

CWE-347