Today > 7 Critical | 27 High | 59 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-9950

Jan. 2, 2025, 4:15 p.m.

Tags

CWE-379
a14582b7-06f4-4d66-8e82-3d7ba3739e88
2025-01-02
CVE-2024-9950

Product(s) Impacted

Forescout SecureConnector

  • 11.3.07.0109

Description

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.

Weaknesses

CWE-379
Creation of Temporary File in Directory with Insecure Permissions

The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

CWE ID: 379

Date

Published: Jan. 2, 2025, 4:15 p.m.

Last Modified: Jan. 2, 2025, 4:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

a14582b7-06f4-4d66-8e82-3d7ba3739e88

References

https://support.forescout.com/ a14582b7-06f4-4d66-8e82-3d7ba3739e88