cisofy records

5 published records for vendor cisofy.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 80%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

5 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
31Monitor	CVE-2017-8108No exploit	Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a cisofy · lynis · CWE-59 Local privilege escalation	High7.8	0.4%Jun 8, 2017
16Monitor	CVE-2020-13882No exploit	CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition.cisofy · lynis · CWE-367 Local privilege escalation Race condition	Medium4.2	0.2%Jun 18, 2020
13Monitor	CVE-2019-13033No exploit	In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed.cisofy · lynis · CWE-200 Info leak	Low3.3	0.3%Jun 18, 2020
13Monitor	CVE-2014-3982No exploit	include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.#cisofy · lynis · CWE-59	Low3.3	0.3%Jun 8, 2014
13Monitor	CVE-2014-3986No exploit	include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsortcisofy · lynis · CWE-59	Low3.3	0.3%Jun 8, 2014

CVE-2017-8108
31Monitor
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
cisofy · lynisJun 8, 2017
CVE-2020-13882
16Monitor
CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition.
MediumCVSS 4.2No exploitEPSS 0%
- Local privilege escalation
- Race condition
cisofy · lynisJun 18, 2020
CVE-2019-13033
13Monitor
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed.
LowCVSS 3.3No exploitEPSS 0%
- Info leak
cisofy · lynisJun 18, 2020
CVE-2014-3982
13Monitor
include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.#
LowCVSS 3.3No exploitEPSS 0%
cisofy · lynisJun 8, 2014
CVE-2014-3986
13Monitor
include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsort
LowCVSS 3.3No exploitEPSS 0%
cisofy · lynisJun 8, 2014