Design/Logic Flaw

2022-04-1114:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges.

CPENameOperatorVersion
dsm_remotele6.3.1.1862

CPE	Name	Operator	Version
	dsm_remote	le	6.3.1.1862

References

hansesecure.de/2022/03/schwachstelle-in-dsm-remote/