exploitDog

CVE-2021-36666

Опубликовано: 12 июл. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.

Ссылки

http://druva.com
Product
https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before
Vendor Advisory
https://imhotepisinvisible.com/druva-lpe/
Exploit
Patch
Technical Description
Third Party Advisory
http://druva.com
Product
https://docs.druva.com/Knowledge_Base/Security_Update/Security_Advisory_for_inSync_Client_7.0.1_and_before
Vendor Advisory
https://imhotepisinvisible.com/druva-lpe/
Exploit
Patch
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:druva:insync_client:*:*:*:*:*:macos:*:*

Версия до 7.0.0 (исключая)

EPSS

Процентиль: 16%

0.00051

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-5rc3-9cqf-fhjx

CVSS3: 7.8

github

больше 3 лет назад

An issue was discovered in Druva 6.9.0 for MacOS, allows attackers to gain escalated local privileges via the inSyncDecommission.

EPSS

Процентиль: 16%

0.00051

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-426