CVE-2017-5235

Опубликовано: 02 мар. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Ссылки

http://www.securityfocus.com/bid/96548
Third Party Advisory
VDB Entry
https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/96548
Third Party Advisory
VDB Entry
https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*

Версия до 4.13.0-2017012501 (включая)

EPSS

Процентиль: 41%

0.00189

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-pm3h-9f72-3xp7