Pritunl kayıtları
Pritunl üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-269 Improper Privilege Management2
- CWE-203 Observable Discrepancy1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
40Planlayın | CVE-2016-7063İstismar yok | A flaw was found in pritunl-client before version 1.0.1116.6.pritunl · pritunl-client · CWE-22 | Kritik9,8 | %2,321 Tem 2020 |
31İzleyin | CVE-2020-25989İstismar yok | Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20.pritunl · pritunl-client-electron · CWE-59 | Yüksek7,8 | %0,719 Kas 2020 |
31İzleyin | CVE-2022-25372İstismar yok | Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windopritunl · pritunl-client-electron · CWE-269 | Yüksek7,8 | %0,620 Şub 2022 |
31İzleyin | CVE-2020-27519İstismar yok | Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component.pritunl · pritunl-client-electron · CWE-269 | Yüksek7,8 | %0,330 Nis 2021 |
30İzleyin | CVE-2016-7064İstismar yok | A flaw was found in pritunl-client before version 1.0.1116.6.pritunl · pritunl-client · CWE-347 | Yüksek7,5 | %0,621 Tem 2020 |
23İzleyin | CVE-2020-25200Kavram kanıtı | Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts.pritunl · pritunl · CWE-203 | Orta5,3 | %7,41 Eki 2020 |
- CVE-2016-706340Planlayın
A flaw was found in pritunl-client before version 1.0.1116.6.
KritikCVSS 9,8İstismar yokEPSS %2pritunl · pritunl-client21 Tem 2020
- CVE-2020-2598931İzleyin
Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20.
YüksekCVSS 7,8İstismar yokEPSS %0pritunl · pritunl-client-electron19 Kas 2020
- CVE-2022-2537231İzleyin
Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windo
YüksekCVSS 7,8İstismar yokEPSS %0pritunl · pritunl-client-electron20 Şub 2022
- CVE-2020-2751931İzleyin
Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl-service component.
YüksekCVSS 7,8İstismar yokEPSS %0pritunl · pritunl-client-electron30 Nis 2021
- CVE-2016-706430İzleyin
A flaw was found in pritunl-client before version 1.0.1116.6.
YüksekCVSS 7,5İstismar yokEPSS %0pritunl · pritunl-client21 Tem 2020
- CVE-2020-2520023İzleyin
Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts.
OrtaCVSS 5,3Kavram kanıtıEPSS %7pritunl · pritunl1 Eki 2020