PT-2023-6778 · Аврора · Аврора

Publicado

2023-10-11

·

Atualizado

2023-10-11

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Аврора (affected versions not specified)
Description The issue is related to a component that checks installed packages in the Аврора operating system, which has inadequate control over the parameters of installed packages. Exploitation of this issue could allow an attacker to execute arbitrary code with elevated privileges using a specially crafted package.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incomplete List of Disallowed Inputs

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-07597

Produtos afetados

Аврора