Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g3gv-gq3r-m3m6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.

EPSS

Процентиль: 52%
0.00286
Низкий

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.

EPSS

Процентиль: 52%
0.00286
Низкий

Дефекты

CWE-269