PT-2017-16408 · Rapid7 · Rapid7 Appspider Pro

Publicado 2017-03-02 · Atualizado 2021-01-08 · CVE-2017-5233

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rapid7 AppSpider Pro versions prior to 6.14.053

Description The issue concerns a DLL preloading vulnerability. This means that the installer can potentially load a malicious DLL if it is located in the current working directory of the installer.

Recommendations For versions prior to 6.14.053, update to version 6.14.053 or later to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-5233

Produtos afetados

Rapid7 Appspider Pro

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-5233 · Nota de Segurança
• https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products · Aviso do Fabricante
• http://securityfocus.com/bid/96957 · Nota
• https://osv.dev/vulnerability/CVE-2017-5233 · Aviso do Fabricante