ГлавнаяУязвимости → CVE-2024-3507
7.7высокая

CVE-2024-3507

Описание

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information.

CVSS
Балл7.7 — высокая
ВекторCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
Источники
https://www.incibe.es/en/incibe-cert/notices/aviso/privilege-escalation-vulnerability-lunarhttps://www.incibe.es/en/incibe-cert/notices/aviso/privilege-escalation-vulnerability-lunar