PT-2023-6778 · Аврора · Аврора
Published
2023-10-11
·
Updated
2023-10-11
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Аврора (affected versions not specified)
Description
The issue is related to a component that checks installed packages in the Аврора operating system, which has inadequate control over the parameters of installed packages. Exploitation of this issue could allow an attacker to execute arbitrary code with elevated privileges using a specially crafted package.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incomplete List of Disallowed Inputs
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Аврора