CVE-2017-6554 pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privile...
HighCVSS 7.2
EPSS 15.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Quest privilege manager | = 6.0.0-27 | No fix listed |
| Quest privilege manager | = 6.0.0-50 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 97686 third-party-advisory vdb-entry
- 0xdeadface.wordpress.com
- support.oneidentity.com
- 41861 exploit third-party-advisory vdb-entry