PT-2013-5736

CVE-2013-5701

·

تاريخ النشر

2013-10-03

·

تاريخ التحديث

2013-10-07

الوصف من

CVSS 2.0
7.2
عالية
المقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions WatchGuard Server Center versions 11.7.3 through 11.7.4
Description The issue allows local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory. This is due to multiple untrusted search path vulnerabilities in Watchguard Log Collector and Watchguard WebBlocker Server.
Recommendations For WatchGuard Server Center versions 11.7.3 through 11.7.4, consider removing or restricting access to the wgpr.dll file in the application's bin directory as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾