Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rp3m-v2vr-fvq8

Опубликовано: 05 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

EPSS

Процентиль: 2%
0.00122
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 7.8
nvd
3 месяца назад

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.

EPSS

Процентиль: 2%
0.00122
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-367