PT-2017-16411 · Rapid7 · Rapid7 Appspider Pro

Publicado 2017-05-03 · Atualizado 2017-05-15 · CVE-2017-5236

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rapid7 AppSpider Pro versions prior to 6.14.060

Description The issue concerns a DLL preloading vulnerability. This means that the installer can potentially load a malicious DLL if it is located in the current working directory of the installer.

Recommendations For versions prior to 6.14.060, update to version 6.14.060 or later to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-5236

Produtos afetados

Rapid7 Appspider Pro

Referências · 3

• https://community.rapid7.com/docs/DOC-3631 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-5236 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5236 · Nota de Segurança