PT-2015-6624 · Emc · Emc Rsa Web Threat Detection

Publicado 2015-10-12 · Atualizado 2021-08-06 · CVE-2015-4548

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RSA Web Threat Detection versions prior to 5.1 SP1

Description The issue allows local users to obtain root privileges by leveraging access to a service account and writing commands to a service configuration file.

Recommendations For versions prior to 5.1 SP1, update to version 5.1 SP1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-4548

Produtos afetados

Emc Rsa Web Threat Detection

Referências · 4

• http://packetstormsecurity.com/files/133779/RSA-Web-Threat-Detection-Privilege-Escalation-Information-Disclosure.html · Nota
• http://securitytracker.com/id/1033672 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4548 · Nota de Segurança
• http://seclists.org/bugtraq/2015/Sep/134 · Nota