Описание
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.0.0.280 (исключая)
Одновременно
cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 29%
0.00105
Низкий
6.5 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 5.5
github
около 3 лет назад
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
EPSS
Процентиль: 29%
0.00105
Низкий
6.5 Medium
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-732