PT-2023-10640 · Flexera · Flexnet Manager Platform+1

Published 2023-03-29 · Updated 2025-02-18 · CVE-2017-6894

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FlexNet Manager Suite versions 2015 R2 SP3 and earlier FlexNet Manager Platform versions 9.2 and earlier

Description A issue exists in the inventory gathering components that can be exploited by local users to perform certain actions with elevated privileges on the local system.

Recommendations For FlexNet Manager Suite versions 2015 R2 SP3 and earlier, update to a version later than 2015 R2 SP3 to resolve the issue. For FlexNet Manager Platform versions 9.2 and earlier, update to a version later than 9.2 to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-6894

Affected Products

Flexnet Manager Platform

Flexnet Manager Suite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-6894 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6894 · Vendor Advisory
• https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/A-vulnerability-exists-in-FlexNet-Manager-Suite-release-2015-R2/ta-p/1891 · Vendor Advisory
• https://t.me/cvenotify/111640 · Telegram Post