PT-2018-13221 · Accupos · Accupos

Publicado 2018-08-23 · Atualizado 2020-08-24 · CVE-2018-15809

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AccuPOS version 2017.8

Description The issue concerns an insecure permission setting, specifically "Authenticated Users: Modify", applied to files within the installation path. This setting may enable local attackers to compromise the integrity of critical resource and executable files.

Recommendations For AccuPOS version 2017.8, consider changing the permission setting from "Authenticated Users: Modify" to a more restrictive setting to prevent local attackers from modifying critical files.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-15809

Produtos afetados

Accupos

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-15809 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15809 · Nota de Segurança
• https://versprite.com/advisories/accupos · Nota