CVE-2017-15918

Опубликовано: 01 нояб. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 2.1

EPSS Низкий

Описание

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

Ссылки

https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/43221/
Exploit
Third Party Advisory
VDB Entry
https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/43221/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ignitum:sera:1.2:*:*:*:*:iphone_os:*:*

cpe:2.3:a:ignitum:sera:1.2:*:*:*:*:mac_os_x:*:*

EPSS

Процентиль: 49%

0.00256

Низкий

7.8 High

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-r563-x828-cr83