Privilege escalation

2022-11-1408:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

web server

ironman software powershell universal

patched versions

http web request

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

JSON

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.

CPENameOperatorVersion
powershell_universalge3.5.0
powershell_universallt3.5.3
powershell_universalge3.0.0
powershell_universallt3.4.7
powershell_universalge2.0.0
powershell_universallt2.12.6

Name	Operator	Version
powershell_universal	ge	3.5.0
powershell_universal	lt	3.5.3
powershell_universal	ge	3.0.0
powershell_universal	lt	3.4.7
powershell_universal	ge	2.0.0
powershell_universal	lt	2.12.6