Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q9h2-7m5w-75p4

Опубликовано: 02 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

EPSS

Процентиль: 91%
0.06904
Низкий

8 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8
nvd
около 2 лет назад

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

CVSS3: 8
fstec
больше 2 лет назад

Уязвимость приложения для синхронизации файлов Qsync Central, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

EPSS

Процентиль: 91%
0.06904
Низкий

8 High

CVSS3

Дефекты

CWE-732