PT-2023-15447 · Apache Friends · Xampp

CVE-2022-47637

·

Publicado

2023-09-12

·

Atualizado

2023-09-15

CVSS v3.1

6.7

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions XAMPP versions 8.1.12 and earlier
Description The issue allows local users to write to the C:xampp directory. In common use cases, files under C:xampp are executed with administrative privileges.
Recommendations For XAMPP versions 8.1.12 and earlier, consider restricting write access to the C:xampp directory to prevent local users from modifying its contents until a patch is available. As a temporary workaround, avoid executing files under C:xampp with administrative privileges to minimize the risk of exploitation.

Exploit

Correção

Improper Preservation of Permissions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-47637

Produtos afetados

Xampp