CVE-2023-26603

Medium

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to…

mitre·CWE-378·Published 2024-04-26

CVSS

5.9

EPSS

0.00

KEV

Exploits

cve.orgen

178 chars

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.

NVDen

178 chars

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.

JumpCloud Agent anterior a 1.178.0 crea un archivo temporal en un directorio con permisos inseguros. Esto permite escalar privilegios al SYSTEM mediante una acción de reparación en el instalador.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.9	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.9	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	5.9	2.5	3.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L