CVE-2020-9858

EPSS 0.06%
Veröffentlicht 09.06.2020 17:15:15
Zuletzt bearbeitet 21.11.2024 05:41:25
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Windows Migration Assistant Version < 2.2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.167

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://support.apple.com/HT211186

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-9858

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-9858

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-9858

EUVD