Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-23921

Опубликовано: 25 фев. 2022
Источник: nvd
CVSS3: 7.5
CVSS3: 7.8
CVSS2: 3.7
EPSS Низкий

Описание

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ge:proficy_cimplicitiy:*:*:*:*:*:*:*:*
Версия до 11.1 (включая)

EPSS

Процентиль: 11%
0.00038
Низкий

7.5 High

CVSS3

7.8 High

CVSS3

3.7 Low

CVSS2

Дефекты

CWE-269
CWE-269

Связанные уязвимости

CVSS3: 7.8
github
почти 4 года назад

Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the CIMPLICITY server is not already running a project, and the server is licensed for multiple projects.

EPSS

Процентиль: 11%
0.00038
Низкий

7.5 High

CVSS3

7.8 High

CVSS3

3.7 Low

CVSS2

Дефекты

CWE-269
CWE-269