Описание
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
FAQ
According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?
An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Visual Studio Code Remote - SSH Extension |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
7.1 High
CVSS3
Связанные уязвимости
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
Уязвимость расширения Visual Studio Code Remote - SSH Extension редактора исходного кода Visual Studio Code, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии
EPSS
7.1 High
CVSS3