CVE-2024-8975CWE-428

Grafana Alloy on Windows Unquoted service path

High · published September 25, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM

This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2024-09-25T16:42Z
EPSS history
Timeline
  • 25 SEP 16:42Z
    Grafana Alloy on Windows Unquoted service path
    cvelistv5