2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Skyhigh Client Proxy","vendor":"Skyhigh","versions":[{"status":"affected","version":"4.8.1"}]}],"source":"trellixpsirt@trellix.com"},{"affectedData":[{"cpes":["cpe:2.3:a:skyhighsecurity:client_proxy:4.8.1:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"client_proxy","vendor":"skyhighsecurity","versions":[{"status":"affected","version":"4.8.1"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could target it and undo the bypass, thereby denying the victim access to the update service, causing it to fail. "},{"lang":"es","value":"Un usuario interno malicioso que aproveche esta vulnerabilidad puede eludir los controles de seguridad existentes implementados por la organización. Por el contrario, si la víctima está utilizando legítimamente la omisión temporal para acceder a Internet para recuperar aplicaciones y actualizaciones del sistema, un dispositivo remoto podría apuntar a ella y deshacer la omisión, negándole así a la víctima el acceso al servicio de actualización, provocando que fallar."}],"id":"CVE-2024-0313","lastModified":"2026-06-17T06:53:15.300","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"trellixpsirt@trellix.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0313","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-02T19:26:05.838851Z","version":"2.0.3"}}]},"published":"2024-03-14T09:15:47.153","references":[{"source":"trellixpsirt@trellix.com","url":"https://kcm.trellix.com/corporate/index?page=content&id=SB10418"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://kcm.trellix.com/corporate/index?page=content&id=SB10418"}],"sourceIdentifier":"trellixpsirt@trellix.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-670"}],"source":"trellixpsirt@trellix.com","type":"Secondary"}]}
|