PT-2023-29150 · Sonicwall · Sonicwall Directory Services Connector
CVE-2023-44219
·
Publicado
2023-10-27
·
Atualizado
2023-11-07
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SonicWall Directory Services Connector Windows MSI client versions 4.1.21 and earlier
Description
A local privilege escalation issue allows a local low-privileged user to gain system privileges through running the recovery feature.
Recommendations
For SonicWall Directory Services Connector Windows MSI client versions 4.1.21 and earlier, update to a version later than 4.1.21 to resolve the issue.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sonicwall Directory Services Connector