PT-2018-2873 · Strazh Nt · Strazh Nt

Published 2018-12-20 · Updated 2018-12-20

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Strazh NT (affected versions not specified)

Description The issue is related to insufficient access control to file system object attributes. An attacker, acting locally, can exploit this to gain unauthorized access to file system object information, bypassing access control rules by utilizing a special $DATA attribute that contains file data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-02417

Affected Products

Strazh Nt

References · 1

• https://bdu.fstec.ru/vul/2019-02417 · Security Note