CVE-2024-45770 - CERT CVE
ID CVE-2024-45770
Sažetak A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.
Reference
CVSS
Base: 4.4
Impact: 2.5
Exploitability:1.8
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW NONE
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Zadnje važnije ažuriranje 19-09-2024 - 14:15
Objavljeno 19-09-2024 - 09:15