Lucene search

K
cve[email protected]CVE-2010-5215
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5215

2022-10-0316:21:02
web.nvd.nist.gov
19
cve-2010-5215
untrusted search path
swish max3
privilege escalation
dwmapi.dll
swishmax3res.dll
nvd
vulnerability

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.7%

Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) SWiSHmax3res.dll file in the current working directory, as demonstrated by a directory that contains a .swi file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
swishzoneswish_max3Match3.0.2009.11.30

6.9 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.7%

Related for CVE-2010-5215