Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47759
HistoryJun 26, 2024 - 7:30 a.m.

Privilege Escalation

2024-06-2607:30:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
pgadmin4
privilege escalation
debian
rhel 8
installation directory

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

7.1 High

AI Score

Confidence

High

pgAdmin4 is vulnerable to Privilege Escalation. The vulnerability is caused by improper permissions set on the installation directory, allowing attackers to gain unauthorized access on Debian or RHEL 8 platforms.

CPENameOperatorVersion
pgadmin4le8.8
pgadmin4le8.8

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

7.1 High

AI Score

Confidence

High

Related for VERACODE:47759