Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gwhr-w2cq-85f2

Опубликовано: 14 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

The Application is vulnerable to an authenticated Arbitrary File Deletion. This affects the Agent installed on Linux and Windows alike. As the application runs with highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers may use the vulnerability to delete critical files.

This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

The Application is vulnerable to an authenticated Arbitrary File Deletion. This affects the Agent installed on Linux and Windows alike. As the application runs with highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers may use the vulnerability to delete critical files.

This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

EPSS

Процентиль: 33%
0.0013
Низкий

8.7 High

CVSS4

Дефекты

CWE-22

Связанные уязвимости

nvd
7 месяцев назад

An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

EPSS

Процентиль: 33%
0.0013
Низкий

8.7 High

CVSS4

Дефекты

CWE-22