Описание
Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:progress:fiddler:5.0.20182.28034:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.00012
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-354
Связанные уязвимости
github
больше 3 лет назад
Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.
EPSS
Процентиль: 1%
0.00012
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-354