Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gjgj-cghx-qc4f

Опубликовано: 20 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.

EPSS

Процентиль: 4%
0.00019
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 года назад

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324.

EPSS

Процентиль: 4%
0.00019
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-863