PT-2019-9271 · Poweract · Poweract Pro Master Agent For Windows

Akane + 1 · Publicado 2019-03-27 · Atualizado 2019-10-03 · CVE-2018-16207

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PowerAct Pro Master Agent for Windows versions 5.13 and earlier

Description The issue allows authenticated attackers to bypass access restrictions, enabling them to alter or edit unauthorized files. The exact vectors used for this bypass are not specified.

Recommendations For PowerAct Pro Master Agent for Windows versions 5.13 and earlier, update to a version later than 5.13 to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-16207

Produtos afetados

Poweract Pro Master Agent For Windows

Referências · 5

• https://oss.omron.co.jp/ups/info/topics/190326.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16207 · Nota de Segurança
• https://oss.omron.co.jp/ups/support/download/soft/poweractpro/master/poweractpro_master_windows.html · Nota
• https://osv.dev/vulnerability/CVE-2018-16207 · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN63981842/index.html · Nota