Описание
Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.
Ссылки
- Third Party Advisory
- Product
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 4.9.4 (включая)
cpe:2.3:a:macro-expert:macro_expert:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00176
Низкий
7.8 High
CVSS3
Дефекты
CWE-276
Связанные уязвимости
CVSS3: 7.8
github
почти 2 года назад
Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.
EPSS
Процентиль: 39%
0.00176
Низкий
7.8 High
CVSS3
Дефекты
CWE-276