Описание
A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.59.4 (исключая)
cpe:2.3:a:tenable:identity_exposure:*:*:*:*:*:*:*:*
EPSS
Процентиль: 7%
0.00026
Низкий
7.3 High
CVSS3
Дефекты
CWE-78
CWE-78
Связанные уязвимости
CVSS3: 7.3
github
почти 2 года назад
A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.
EPSS
Процентиль: 7%
0.00026
Низкий
7.3 High
CVSS3
Дефекты
CWE-78
CWE-78