CVE-2020-12744

EPSS 0.04%
Veröffentlicht 20.10.2022 11:15:09
Zuletzt bearbeitet 08.05.2025 18:15:39
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Verint ≫ Desktop And Process Analytics Version15.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.124

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://github.com/bwiltse/cve/blob/master/Verint/Verint-CVE-2020-12744.txt

Third Party Advisory

https://github.com/bwiltse/verint

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2020-12744

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-12744

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-12744

EUVD