VulnerabilityModified
CVE-2007-2950
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
HIGH 7.2EPSS 0.39%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.39%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.39% probability · 32th percentile
- CISA KEV
- Not listed
- Affected
- centennial/discovery · numara/asset manager · symantec/discovery
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/25354Vendor Advisory
- http://secunia.com/advisories/25374Vendor Advisory
- http://secunia.com/advisories/25379Vendor Advisory
- http://secunia.com/secunia_research/2007-58/advisory/Vendor Advisory
- http://secunia.com/secunia_research/2007-59/advisory/Vendor Advisory
- http://secunia.com/secunia_research/2007-60/advisory/Vendor Advisory
- http://www.securityfocus.com/bid/25000
- http://www.vupen.com/english/advisories/2007/2599
- http://www.vupen.com/english/advisories/2007/2600
- http://www.vupen.com/english/advisories/2007/2603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35564
- http://secunia.com/advisories/25354Vendor Advisory
- http://secunia.com/advisories/25374Vendor Advisory
- http://secunia.com/advisories/25379Vendor Advisory
- http://secunia.com/secunia_research/2007-58/advisory/Vendor Advisory
- http://secunia.com/secunia_research/2007-59/advisory/Vendor Advisory
- http://secunia.com/secunia_research/2007-60/advisory/Vendor Advisory
- http://www.securityfocus.com/bid/25000
- http://www.vupen.com/english/advisories/2007/2599
- http://www.vupen.com/english/advisories/2007/2600
- http://www.vupen.com/english/advisories/2007/2603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35564
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.