Lucene search
HistoryApr 26, 2024 - 8:15 p.m.
CVE-2023-26603
jumpcloud agent
temporary file
insecure permissions
privilege escalation
installer
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.
Related
cve
cve
CVE-2023-26603
2024-04-26 20:15:07
cvelist
cvelist
CVE-2023-26603
2024-04-26 00:00:00
vulnrichment
vulnrichment
CVE-2023-26603
2024-04-26 00:00:00
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-26603