320
VMScore

CVE-2019-1794

Published: 18/04/2019 Updated: 24/03/2023
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.1 | Impact Score: 4.2 | Exploitability Score: 0.8
VMScore: 320
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local malicious user to load a binary of their choosing. The vulnerability is due to uncontrolled search path elements. An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Directory Connector to locate and load required resources.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco meeting server 2.2

Vendor Advisories

A vulnerability in the search path processing of Cisco Directory Connector could allow an authenticated, local attacker to load a binary of their choosing The vulnerability is due to uncontrolled search path elements An attacker could exploit this vulnerability by placing a binary of their choosing earlier in the search path utilized by Cisco Di ...