漏洞标题
N/A
漏洞描述信息
CWE-269：存在权限管理不当的漏洞，涉及两个服务（其中一个管理审计跟踪数据，另一个作为服务器管理客户端请求），当拥有标准权限的攻击者修改Windows服务的可执行路径时，可能会导致工程工作站的保密性、完整性和可用性受损。要利用该漏洞，需要重新启动相关服务。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
漏洞类别
特权管理不恰当
漏洞标题
N/A
漏洞描述信息
CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit
trail data and the other acting as server managing client request) that could cause a loss of Confidentiality,
Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the
executable path of the windows services. To be exploited, services need to be restarted.
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
特权管理不恰当