CVE-2024-9950CWE-379

Abuse of Unauthenticated Compliance Recheck in SecureConnector

High · published January 2, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows

unauthenticated user to modify compliance scripts due to insecure temporary directory.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2025-01-02T15:40Z
EPSS history
Timeline
  • 02 JAN 15:40Z
    Abuse of Unauthenticated Compliance Recheck in SecureConnector
    cvelistv5