Lucene search

MitreCVE-2017-5873

HistoryApr 11, 2017 - 3:59 p.m.

CVE-2017-5873

2017-04-1115:59:00

CWE-428

mitre

web.nvd.nist.gov

cve-2017-5873

unisys s-par

windows

vulnerability

nvd

privilege escalation

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Affected configurations

Nvd

Node

unisyssecure_partitioningMatch4.3.403

unisyssecure_partitioningMatch4.4.19

VendorProductVersionCPE
unisyssecure_partitioning4.3.403cpe:2.3:a:unisys:secure_partitioning:4.3.403:*:*:*:*:*:*:*
unisyssecure_partitioning4.4.19cpe:2.3:a:unisys:secure_partitioning:4.4.19:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
unisys	secure_partitioning	4.3.403	cpe:2.3:a:unisys:secure_partitioning:4.3.403:::::::*
unisys	secure_partitioning	4.4.19	cpe:2.3:a:unisys:secure_partitioning:4.4.19:::::::*

References

public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2017-5873