Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6mh-6454-qm24

Опубликовано: 25 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.

In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.

EPSS

Процентиль: 38%
0.00164
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 9.8
nvd
3 месяца назад

In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.

EPSS

Процентиль: 38%
0.00164
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-23