CVE Vulnerabilities

CVE-2024-22795

Improper Privilege Management

Published: Feb 08, 2024 | Modified: Feb 15, 2024
CVSS 3.x
7
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Secureconnector Forescout 11.3.06.0063 (including) 11.3.06.0063 (including)

Potential Mitigations

References