Описание
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
Ссылки
- Permissions Required
- US Government Resource
- Vendor Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 26.2.3 (включая)
cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*
EPSS
Процентиль: 100%
0.77994
Высокий
9.8 Critical
CVSS3
Дефекты
CWE-290
Связанные уязвимости
CVSS3: 9.8
github
24 дня назад
The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
EPSS
Процентиль: 100%
0.77994
Высокий
9.8 Critical
CVSS3
Дефекты
CWE-290