Lucene search

K
cve[email protected]CVE-2017-6894
HistoryMar 29, 2023 - 9:15 p.m.

CVE-2017-6894

2023-03-2921:15:07
CWE-269
web.nvd.nist.gov
16
cve-2017-6894
flexnet manager suite
vulnerability
inventory gathering components
local users
privilege escalation
security issue
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system.

Affected configurations

NVD
Node
flexeraflexnet_managerRange9.2
OR
flexeraflexnet_manager_suite_2015Match-
OR
flexeraflexnet_manager_suite_2015Matchr2-
OR
flexeraflexnet_manager_suite_2015Matchr2sp1
OR
flexeraflexnet_manager_suite_2015Matchr2sp2
OR
flexeraflexnet_manager_suite_2015Matchr2sp3

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2017-6894