Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cvp3-wg3p-vm94

Опубликовано: 09 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.

EPSS

Процентиль: 47%
0.00241
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-267

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость клиента VPN-сервиса SINEMA Remote Connect, связанная с небезопасным управлением привилегиями, позволяющая нарушителю создать пользователя с правами администратора

EPSS

Процентиль: 47%
0.00241
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-267