漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Rapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service
Vulnerability Description
Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation directory with WRITE_DACL permission to the BUILTIN\\Users group. This allows local users who are not administrators to grant themselves the Full Control permission on Velociraptor's files. By modifying Velociraptor's files, local users can subvert the binary and cause the Velociraptor service to execute arbitrary code as the SYSTEM user, or to replace the Velociraptor binary completely. This issue is fixed in version 0.73.3.
CVSS Information
N/A
Vulnerability Type
对外部实体的文件或目录可访问
Vulnerability Title
Rapid7 Velociraptor MSI Installer 安全漏洞
Vulnerability Description
Rapid7 Velociraptor MSI Installer是美国Rapid7公司的一个独特、先进的开源端点监控、数字取证和网络响应平台。 Rapid7 Velociraptor MSI Installer 0.73.3之前版本存在安全漏洞，该漏洞源于通过创建具有BUILTIN\Users组WRITE_DACL权限的安装目录，导致以SYSTEM用户身份执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A