exploitDog

CVE-2023-26078

Опубликовано: 24 июл. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.

Ссылки

https://github.com/mandiant/Vulnerability-Disclosures
Third Party Advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0009.md
Exploit
Third Party Advisory
https://www.atera.com
Product
https://github.com/mandiant/Vulnerability-Disclosures
Third Party Advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0009.md
Exploit
Third Party Advisory
https://www.atera.com
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:atera:atera:*:*:*:*:*:*:*:*

Версия до 1.8.4.9 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.0007

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5v7f-353x-hqpg

CVSS3: 7.8

github

больше 2 лет назад

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.

EPSS

Процентиль: 22%

0.0007

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-Other