CVE-2017-14124

Published Sep 13, 2017

Last updated 5 years ago

Overview

Description
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
Source
cve@mitre.org
NVD status
Analyzed

Risk scores

CVSS 3.0

Type
Primary
Base score
6.3
Impact score
5.2
Exploitability score
1
Vector string
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
3.3
Impact score
4.9
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-269

Social media

Hype score
Not currently trending

Configurations