Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7376

Опубликовано: 24 авг. 2020
Источник: nvd
CVSS3: 7.1
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rapid7:metasploit:*:*:*:*:*:*:*:*
Версия от 4.11.7 (включая) до 6.0.3 (исключая)

EPSS

Процентиль: 55%
0.00326
Низкий

7.1 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-23
CWE-22

Связанные уязвимости

CVSS3: 9.8
github
больше 3 лет назад

The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host.

EPSS

Процентиль: 55%
0.00326
Низкий

7.1 High

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-23
CWE-22