VulnerabilityModified
CVE-2020-10962
In PowerShell App Deployment Toolkit (aka PSAppDeployToolkit) through 3.8.0, an incorrect access control vulnerability in the default configuration may allow an authenticated user to potentially enable escalation of privilege via local access.
HIGH 7.8EPSS 0.26%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In PowerShell App Deployment Toolkit (aka PSAppDeployToolkit) through 3.8.0, an incorrect access control vulnerability in the default configuration may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.26% probability · 17th percentile
- CISA KEV
- Not listed
- Affected
- psappdeploytoolkit/powershell app deployment toolkit
- Source
- cve@mitre.org
References
- https://discourse.psappdeploytoolkit.com/t/psappdeploytoolkit-3-8-2/2555Release Notes
- https://github.com/PSAppDeployToolkit/PSAppDeployToolkit/releasesRelease Notes
- https://discourse.psappdeploytoolkit.com/t/psappdeploytoolkit-3-8-2/2555Release Notes
- https://github.com/PSAppDeployToolkit/PSAppDeployToolkit/releasesRelease Notes
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.