CVE-2017-5996

Опубликовано: 26 окт. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.

Ссылки

http://www.securitytracker.com/id/1039679
Issue Tracking
Release Notes
Third Party Advisory
VDB Entry
https://www.vsecurity.com/download/advisories/20171026-1.txt
Issue Tracking
Release Notes
Third Party Advisory
http://www.securitytracker.com/id/1039679
Issue Tracking
Release Notes
Third Party Advisory
VDB Entry
https://www.vsecurity.com/download/advisories/20171026-1.txt
Issue Tracking
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:beyondtrust:remote_support:15.2.1:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:15.2.2:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.1.1:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.1.2:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.1.3:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.1.4:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.2.1:*:*:*:*:*:*:*

cpe:2.3:a:beyondtrust:remote_support:16.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00145

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-9469-9gw8-5gq8