SSH Tectia Windows特定路径特权提升漏洞

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

SSH Tectia基于SSH技术,集中管理情况下提供 安全的系统管理,安全的文件传输,安全的程序之间的连接。 Windows版本下的SSH Tectia产品在子进程执行中处理路径名存在漏洞,本地攻击者可以利用漏洞提升特权。 如果本地用户允许建立系统盘ROOT目录中或者"Program Files"文件夹或其子目录中建立文件,就可能放置恶意程序代替正确的SSH Tectia子组件,结果导致以高权限执行任意程序。 SSH Communications Security Tectia Server 5.0.1 SSH Communications Security Tectia Server 5.0 SSH Communications Security Tectia Server 4.4.5 SSH Communications Security Tectia Server 4.4.4 SSH Communications Security Tectia Server 4.4.3 SSH Communications Security Tectia Server 4.4.2 SSH Communications Security Tectia Server 4.4 SSH Communications Security Tectia Server 4.3.7 SSH Communications Security Tectia Server 4.3.6 SSH Communications Security Tectia Server 4.3.5 SSH Communications Security Tectia Server 4.3.4 SSH Communications Security Tectia Server 4.3.3 SSH Communications Security Tectia Server 4.3.2 SSH Communications Security Tectia Server 4.3.1 SSH Communications Security Tectia Server 4.3 SSH Communications Security Tectia Server 4.2.1 SSH...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息