Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c433-q7cj-fw94

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7
nvd
почти 7 лет назад

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

Дефекты

CWE-362