Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxhq-87fx-96v9

Опубликовано: 20 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

EPSS

Процентиль: 17%
0.00054
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-276
CWE-708

Связанные уязвимости

CVSS3: 6.7
nvd
около 3 лет назад

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker to take complete control of the affected device.

CVSS3: 6.3
fstec
около 3 лет назад

Уязвимость облачного агента службы технической поддержки клиентов Cisco CX Cloud Agent, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и получить полный контроль над затронутым устройством

EPSS

Процентиль: 17%
0.00054
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-276
CWE-708