Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8hrh-hhv8-xf2w

Опубликовано: 13 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability has been identified in Polarion ALM (All versions). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.

A vulnerability has been identified in Polarion ALM (All versions). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.

EPSS

Процентиль: 8%
0.00029
Низкий

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.

CVSS3: 7.8
fstec
почти 2 года назад

Уязвимость программного средства управления жизненным циклом разработки Polarion ALM (Application Lifecycle Management), связанная с настройками прав доступа по умолчанию, позволяющая нарушителю повысить свои привилегии до уровня NT AUTHORITY\SYSTEM

EPSS

Процентиль: 8%
0.00029
Низкий

7.8 High

CVSS3

Дефекты

CWE-276