Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx44-m54v-4pwc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or replace other files within the installation folder, which would allow for local privilege escalation.

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or replace other files within the installation folder, which would allow for local privilege escalation.

EPSS

Процентиль: 11%
0.00039
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-276

Связанные уязвимости

CVSS3: 7.8
nvd
больше 4 лет назад

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or replace other files within the installation folder, which would allow for local privilege escalation.

EPSS

Процентиль: 11%
0.00039
Низкий

7.8 High

CVSS3

Дефекты

CWE-269
CWE-276