Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qqhf-v97g-rhw4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.

EPSS

Процентиль: 16%
0.00051
Низкий

7.3 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 7.3
nvd
около 6 лет назад

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.

EPSS

Процентиль: 16%
0.00051
Низкий

7.3 High

CVSS3

Дефекты

CWE-426