Lucene search

MitreCVE-2024-22795

HistoryFeb 08, 2024 - 7:15 p.m.

CVE-2024-22795

2024-02-0819:15:08

CWE-269

mitre

web.nvd.nist.gov

cve-2024-22795

insecure permissions

forescout secureconnector

local attack

privilege escalation

recheck compliance status

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

5.1%

JSON

Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component.

Affected configurations

Nvd

Node

forescoutsecureconnectorMatch11.3.06.0063

VendorProductVersionCPE
forescoutsecureconnector11.3.06.0063cpe:2.3:a:forescout:secureconnector:11.3.06.0063:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
forescout	secureconnector	11.3.06.0063	cpe:2.3:a:forescout:secureconnector:11.3.06.0063:::::::*

References

gist.github.com/Hagrid29/aea0dc35a1e87813dbbb7b317853d023

github.com/Hagrid29/ForeScout-SecureConnector-EoP

www.forescout.com/

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2024-22795