Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4h2-j6vw-9v7g

Опубликовано: 01 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 25%
0.00088
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 6.5
nvd
около 3 лет назад

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 6.3
fstec
около 3 лет назад

Уязвимость компонента Edge Client for Windows (f5fpclientW.exe) средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 25%
0.00088
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-427