CVE-2024-7358CWE-378

Point B Ltd Getscreen Agent Installation getscreen.msi temp file

High · published August 1, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

A vulnerability was found in Point B Ltd Getscreen Agent 2.19.6 on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file getscreen.msi of the component Installation. The manipulation leads to creation of temporary file with insecure permissions. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-273337 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but was not able to provide a technical response in time.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00228 · 12.8th percentile
Weakness
CWE-378 · Creation of Temporary File With Insecure Permissions
Published
2024-08-01T13:31Z
EPSS history
Timeline
  • 01 AUG 13:31Z
    Point B Ltd Getscreen Agent Installation getscreen.msi temp file
    cvelistv5