Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w3jx-33qh-77f8

Опубликовано: 12 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

EPSS

Процентиль: 1%
0.00011
Низкий

6 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6
nvd
около 2 лет назад

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than 3.0.12011.08009(Legacy)/3.3.12011.08103(ESS) would suffer this risk on DELL Inspiron platform.

EPSS

Процентиль: 1%
0.00011
Низкий

6 Medium

CVSS3

Дефекты

CWE-290