PT-2013-5736

CVE-2013-5701

·

Publicado

2013-10-03

·

Atualizado

2013-10-07

Descrição por

CVSS 2.0
7.2
Alta
MétricasAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions WatchGuard Server Center versions 11.7.3 through 11.7.4
Description The issue allows local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory. This is due to multiple untrusted search path vulnerabilities in Watchguard Log Collector and Watchguard WebBlocker Server.
Recommendations For WatchGuard Server Center versions 11.7.3 through 11.7.4, consider removing or restricting access to the wgpr.dll file in the application's bin directory as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾