Lucene search

TrellixCVE-2024-0312

HistoryMar 14, 2024 - 9:15 a.m.

CVE-2024-0312

2024-03-1409:15:46

CWE-622

trellix

web.nvd.nist.gov

cve-2024-0312

malicious insider

skyhigh client proxy

uninstall

security vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Skyhigh Client Proxy",
    "vendor": "Skyhigh",
    "versions": [
      {
        "status": "affected",
        "version": "4.8.1"
      }
    ]
  }
]

References

kcm.trellix.com/corporate/index?page=content&id=SB10418

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-0312