PT-2017-13267 · Unicon · Elux Rp

Published 2017-09-13 · Updated 2019-10-03 · CVE-2017-14124

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions eLux RP versions 5.x through 5.5.999 LTSR eLux RP versions 5.6.x through 5.6.1 CR

Description The issue allows starting applications other than defined when classic desktop mode is used, even if the user does not have permissions to change application definitions.

Recommendations For eLux RP versions 5.x through 5.5.999 LTSR, update to version 5.5.1000 LTSR or later. For eLux RP versions 5.6.x through 5.6.1 CR, update to version 5.6.2 CR or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-14124

Affected Products

Elux Rp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-14124 · Security Note
• https://myelux.com/cvesingle.htm?cve_id=CVE-2017-14124 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-14124 · Vendor Advisory