Lucene search

MitreCVE-2020-12744

HistoryOct 20, 2022 - 11:15 a.m.

CVE-2020-12744

2022-10-2011:15:09

CWE-281

mitre

web.nvd.nist.gov

cve-2020-12744

msi installer

verint desktop resources

privilege escalation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair.

Affected configurations

Nvd

Node

verintdesktop_and_process_analyticsMatch15.2

VendorProductVersionCPE
verintdesktop_and_process_analytics15.2cpe:2.3:a:verint:desktop_and_process_analytics:15.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
verint	desktop_and_process_analytics	15.2	cpe:2.3:a:verint:desktop_and_process_analytics:15.2:::::::*

References

github.com/bwiltse/cve/blob/master/Verint/Verint-CVE-2020-12744.txt

github.com/bwiltse/verint

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-12744