PT-2017-13267 · Unicon · Elux Rp

Publicado 2017-09-13 · Atualizado 2019-10-03 · CVE-2017-14124

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions eLux RP versions 5.x through 5.5.999 LTSR eLux RP versions 5.6.x through 5.6.1 CR

Description The issue allows starting applications other than defined when classic desktop mode is used, even if the user does not have permissions to change application definitions.

Recommendations For eLux RP versions 5.x through 5.5.999 LTSR, update to version 5.5.1000 LTSR or later. For eLux RP versions 5.6.x through 5.6.1 CR, update to version 5.6.2 CR or later.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-14124

Produtos afetados

Elux Rp

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14124 · Nota de Segurança
• https://myelux.com/cvesingle.htm?cve_id=CVE-2017-14124 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14124 · Aviso do Fabricante