Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9v69-c968-gpf3

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.

EPSS

Процентиль: 9%
0.00034
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 5.5
nvd
почти 7 лет назад

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client.

EPSS

Процентиль: 9%
0.00034
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-426