PT-2024-26072 · Kperfmon · Kperfmon
CVSS v3.1
4.0
Medium
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
kperfmon versions prior to SMR Sep-2024 Release 1
Description
The issue is related to incorrect authorization in kperfmon, allowing local attackers to access information related to performance, including app usage.
Recommendations
For versions prior to SMR Sep-2024 Release 1, update to SMR Sep-2024 Release 1 or later to resolve the issue.
As a temporary workaround, consider restricting access to kperfmon to minimize the risk of exploitation.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kperfmon