Lucene search

K
kasperskyKaspersky LabKLA10319
HistoryJan 25, 2014 - 12:00 a.m.

KLA10319 Vulnerability in Secunia CSI Agent

2014-01-2500:00:00
Kaspersky Lab
threats.kaspersky.com
24

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Insecure file permissions were found in Secunia CSI Agent. By exploiting this vulnerability malicious users can change configurations. This vulnerability can be exploited locally via an XML config.

Original advisories

Related products

Secunia-CSI-Agent

CVE list

CVE-2013-5364 warning

Solution

Update to latest version

Impacts

  • LoI

Loss of integrity. Exploitation of vulnerabilities with this impact can lead to partial system fault or system components connection disruption.

Affected Products

  • Secunia CSI Agent versions 6.0.0.15017 and earlierSecunia CSI Agent 6.0.1 versions 6.0.1.1007 and earlierSecunai CSI Agent 7.0.0.21 versions 7.0.0.21 and earlier

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for KLA10319