Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g47j-994j-jc39

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems.

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems.

EPSS

Процентиль: 21%
0.00069
Низкий

7.4 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.4
nvd
больше 5 лет назад

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.

EPSS

Процентиль: 21%
0.00069
Низкий

7.4 High

CVSS3

Дефекты

CWE-59