PT-2024-53 · Unknown · Pt Application Inspector

Published 2024-12-19 · Updated 2024-12-19

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions PT Application Inspector (affected versions not specified)

Description The issue is related to incorrect restriction of a directory path name with limited access in the PT Application Inspector software. This can be exploited by a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-36

Related Identifiers

BDU:2024-11475

Affected Products

Pt Application Inspector

References · 2

• https://bdu.fstec.ru/vul/2024-11475 · Security Note
• https://support.ptsecurity.com/index.php?/News/NewsItem/View/1348/byulleten-po-bezopasnosti-dlya-pt-application-inspector-pt-ai · Note