CVE-2024-6714CWE-73

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege

High · published July 23, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2024-07-23T15:46Z
EPSS history
Timeline
  • 23 JUL 15:46Z
    An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege
    cvelistv5