Lucene search
MitreCVE-2023-26603HistoryApr 26, 2024 - 8:15 p.m.
CVE-2023-26603
2024-04-2620:15:07
CWE-378
mitre
web.nvd.nist.gov
31
jumpcloud agent
insecure permissions
privilege escalation
temporary file
installer
nvd
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7
Confidence
Low
EPSS
0
Percentile
9.0%
JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.
Related
nvd
nvd
CVE-2023-26603
2024-04-26 20:15:07
cvelist
cvelist
CVE-2023-26603
2024-04-26 00:00:00
vulnrichment
vulnrichment
CVE-2023-26603
2024-04-26 00:00:00
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
7
Confidence
Low
EPSS
0
Percentile
9.0%
Related for CVE-2023-26603