Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j7fr-7wrw-rww2

Опубликовано: 05 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox” option and with root privileges) exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox” option and with root privileges) exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 56%
0.00333
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-250

Связанные уязвимости

CVSS3: 6.8
nvd
почти 2 года назад

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox” option and with root privileges) exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 56%
0.00333
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-250