| |
Vulnerability CVE-2013-3270
Published: 2013-05-20
| Description: |
EMC VNX Control Station before 7.1.70.2 and Celerra Control Station before 6.0.70.1 have an incorrect group ownership for unspecified script files, which allows local users to gain privileges by leveraging nasadmin group membership. |
See advisories in our WLB2 database: | Topic | Author | Date |
Med. |
| EMC | 17.05.2013 |
Type:
CWE-264 (Permissions, Privileges, and Access Controls)
CVSS2 => (AV:L/AC:L/Au:S/C:C/I:C/A:C)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.8/10 |
10/10 |
3.1/10 |
| Exploit range |
Attack complexity |
Authentication |
Local |
Low |
Single time |
| Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
Complete |
Complete |
References: |
http://archives.neohapsis.com/archives/bugtraq/2013-05/0063.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
