CVE-2021-28271

Опубликовано: 27 апр. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.

Ссылки

https://www.exploit-db.com/exploits/49678
Exploit
Third Party Advisory
VDB Entry
https://www.zeroscience.mk/en/vulnerabilities
Exploit
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/49678
Exploit
Third Party Advisory
VDB Entry
https://www.zeroscience.mk/en/vulnerabilities
Exploit
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:soyal:701clientsql:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.2 (исключая)

cpe:2.3:a:soyal:701server:*:*:*:*:*:*:*:*

Версия до 9.0.2 (включая)

cpe:2.3:a:soyal:701serversql:*:*:*:*:*:*:*:*

Версия от 10.0 (включая) до 10.2 (исключая)

EPSS

Процентиль: 85%

0.02421

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

GHSA-pcf5-9h8p-cw4v

github

больше 3 лет назад