Lucene search
Veracode Vulnerability DatabaseVERACODE:46047HistoryMar 28, 2024 - 4:49 a.m.
Insecure Temporary File Usage
2024-03-2804:49:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
vulnerability
insufficient protection
privilege escalation
low privilege users
installation binaries
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
15.5%
wixtoolset.sdk,wix is vulnerable to Insecure Temporary File Usage. The vulnerability is due to insufficient protection against low privilege users tampering with installation binaries, which can result in privilege escalation.
Related
osv
osv
WiX based installers are vulnerable to binary hijack when run as SYSTEM
2024-03-25 19:42:32
CVE-2024-29187
2024-03-24 20:15:08
github
github
WiX based installers are vulnerable to binary hijack when run as SYSTEM
2024-03-25 19:42:32
cvelist
cvelist
mscve
mscve
cve
cve
CVE-2024-29187
2024-03-24 20:15:08
nvd
nvd
CVE-2024-29187
2024-03-24 20:15:08
vulnrichment
vulnrichment
nessus
nessus
Wix Toolset < 3.14.1 / 4.x < 4.0.5 Multiple Vulnerabilities
2024-03-28 00:00:00
Security Updates for Microsoft Visual Studio Products (June 2024)
2024-06-11 00:00:00
kaspersky
kaspersky
KLA68912 Multiple vulnerabilities in Microsoft Developer Tools
2024-06-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2024
2024-06-11 19:43:48
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
EPSS
0
Percentile
15.5%
Related for VERACODE:46047