Описание
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges.
ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.8 High
CVSS3
7.8 High
CVSS3
Дефекты
Связанные уязвимости
During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability.
Уязвимость средств антивирусной защиты ESET Server Security, ESET Endpoint Antivirus, ESET Cyber Security, ESET Endpoint Antivirus, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии до уровня root
EPSS
7.8 High
CVSS3
7.8 High
CVSS3