Lucene search

K
kasperskyKaspersky LabKLA11446
HistoryJun 14, 2006 - 12:00 a.m.

KLA11446 SB vulnerability in WinSCP

2006-06-1400:00:00
Kaspersky Lab
threats.kaspersky.com
12

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:C/I:C/A:N

6.9 Medium

AI Score

Confidence

Low

0.088 Low

EPSS

Percentile

94.6%

Argument injection vulnerability was found in WinSCP. Malicious users can exploit this vulnerability to bypass security restrictions.

Original advisories

Older Versions

Related products

WinSCP

CVE list

CVE-2006-3015 high

Solution

Update to the latest version

Download WinSCP

Impacts

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • WinSCP 3.8.1

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:C/I:C/A:N

6.9 Medium

AI Score

Confidence

Low

0.088 Low

EPSS

Percentile

94.6%