Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Metasploit Framework安装程序本地特权提升漏洞
Vulnerability Description
Metasploit Framework是一个编写,测试和使用exploit代码的完善环境。 当运行于Windows平台时,Metasploit Framework 3.5.1版本的安装程序使用了Metasploit安装目录中的不安全继承许可。本地用户可通过替换带有Trojan木马的致命文件获取特权。
CVSS Information
N/A
Vulnerability Type
N/A