Lucene search

K
zdiTrendyTofu - Trend Micro Zero Day InitiativeZDI-18-299
HistoryApr 12, 2018 - 12:00 a.m.

Hewlett Packard Enterprise Universal CMDB Product Installation File Access Control Privilege Escalation Vulnerability

2018-04-1200:00:00
TrendyTofu - Trend Micro Zero Day Initiative
www.zerodayinitiative.com
11

EPSS

0.005

Percentile

76.7%

This vulnerability allows local attackers to escalate privilege on vulnerable installations of Hewlett Packard Enterprise Universal CMDB. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within an access control set with insufficient privileges during the installation of the product. An attacker can leverage this vulnerability to execute arbitrary code under the context of SYSTEM.

EPSS

0.005

Percentile

76.7%

Related for ZDI-18-299