PT-2017-17394 · Flexera · Flexnet Manager Suite

Published 2017-05-16 · Updated 2019-10-03 · CVE-2017-6885

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FlexNet Manager Suite versions 2014 R3 through 2016 R1 SP1 FlexNet Manager Suite versions prior to 2017 R1

Description An error in handling external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon can be exploited to gain elevated privileges.

Recommendations For FlexNet Manager Suite versions 2014 R3 through 2016 R1 SP1, update to a version later than 2016 R1 SP1. For FlexNet Manager Suite versions prior to 2017 R1, update to 2017 R1 or later.

Fix

Related Identifiers

CVE-2017-6885

Affected Products

Flexnet Manager Suite

References · 3

• https://osv.dev/vulnerability/CVE-2017-6885 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6885 · Security Note
• https://secuniaresearch.flexerasoftware.com/advisories/76223 · Note