Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wp73-jjrg-gp39

Опубликовано: 04 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the daemon user on a sipXcom server can overwrite a service file, and escalate their privileges to root.

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the daemon user on a sipXcom server can overwrite a service file, and escalate their privileges to root.

EPSS

Процентиль: 92%
0.08803
Низкий

8.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 8.8
nvd
почти 3 года назад

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.

CVSS3: 8.8
fstec
почти 3 года назад

Уязвимость файла службы /etc/init.d/openfire сервера PBX корпоративной системы управления IP-телефонией CoreDial sipXcom sipXopenfire, позволяющая нарушителю повысить свои привилегии или выполнить произвольные команды

EPSS

Процентиль: 92%
0.08803
Низкий

8.8 High

CVSS3

Дефекты

CWE-276