Описание
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
EPSS
7.8 High
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been identified in Polarion ALM (All versions). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.
Уязвимость программного средства управления жизненным циклом разработки Polarion ALM (Application Lifecycle Management), связанная с настройками прав доступа по умолчанию, позволяющая нарушителю повысить свои привилегии до уровня NT AUTHORITY\SYSTEM
EPSS
7.8 High
CVSS3