Описание
An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be used to start external programs with elevated permissions because of an Untrusted Search Path.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.2.26 (включая)
Одновременно
cpe:2.3:a:eracent:epa_agent:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00051
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-426
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be used to start external programs with elevated permissions because of an Untrusted Search Path.
EPSS
Процентиль: 16%
0.00051
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-426