4.4
CVE-2026-12164
- EPSS 0.1%
- Veröffentlicht 23.06.2026 22:15:37
- Zuletzt bearbeitet 29.06.2026 16:21:12
- CVE-Watchlists
- Unerledigt
LoginPrivilege Escalation in Fortra File Integrity Monitoring (FIM)
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortra ≫ File Integrity Monitoring Version < 9.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.011 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| df4dee71-de3a-4139-9588-11b62fe6c0ff | 4.4 | 0.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
|
CWE-266 Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
https://www.fortra.com/security/advisories/product-security/fi-2026-010