Loading vulnerability details…
CVSS v3.1
6.8
EPSS
0.29%
Published
Sep 3, 2020
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.
CVSS Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (1)
References (2)